STIGQter: STIG Summary: IBM AIX 7.x Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

All AIX interactive users home directories must be owned by their respective users.

DISA Rule

SV-215276r508663_rule

Vulnerability Number

V-215276

Group Title

SRG-OS-000480-GPOS-00230

Rule Version

AIX7-00-002085

Severity

CAT II

CCI(s)

CCI-000366 - The organization implements the security configuration settings.

Weight

Fix Recommendation

Change the owner of a user's home directory to its assigned user using command:
# chown <user> <home directory>

Check Contents

Check the ownership of each user's home directory listed in the "/etc/passwd file":

# cut -d: -f6 /etc/passwd | xargs ls -lLd

drwxr-xr-x 21 root system 4096 Jan 29 09:58 /

drwxr-xr-x 4 bin bin 45056 Jan 24 12:31 /bin

drwxr-xr-x 2 doejohn staff 256 Jan 25 13:18 /home/doejohn

drwxr-xr-x 2 sshd system 256 Aug 11 2017 /home/srvproxy

drwx------ 2 root system 256 Jan 30 12:54 /root

drwxrwxr-x 4 bin bin 256 Mar 23 2017 /usr/sys

drwxrwxr-x 15 root adm 4096 Jan 24 12:26 /var/adm

drwxr-xr-x 6 root system 4096 Jan 24 07:34 /var/adm/invscout

drwxr-xr-x 8 esaadmin system 256 Jan 24 09:02 /var/esa

If any user's home directory is not owned by the assigned user, this is a finding.

Vulnerability Number

V-215276

Documentable

False

Rule Version

AIX7-00-002085

Severity Override Guidance

Check Content Reference

Target Key

4012

All AIX interactive users home directories must be owned by their respective users.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments