STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

All RHEL 9 interactive users must have a primary group that exists.

DISA Rule

SV-258048r1069380_rule

Vulnerability Number

V-258048

Group Title

SRG-OS-000104-GPOS-00051

Rule Version

RHEL-09-411045

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

Configure the system so that all GIDs are referenced in "/etc/passwd" are defined in "/etc/group".

Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.

Check Contents

Verify that all RHEL 9 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Vulnerability Number

V-258048

Documentable

False

Rule Version

RHEL-09-411045

Severity Override Guidance

Verify that all RHEL 9 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Check Content Reference

M

Target Key

5551