STIGQter: STIG Summary: Red Hat Enterprise Linux 9 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

RHEL 9 groups must have unique Group ID (GID).

DISA Rule

SV-258061r958482_rule

Vulnerability Number

V-258061

Group Title

SRG-OS-000104-GPOS-00051

Rule Version

RHEL-09-411110

Severity

CAT II

CCI(s)

CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

Fix Recommendation

Edit the file "/etc/group" and provide each group that has a duplicate GID with a unique GID.

Check Contents

Verify that RHEL 9 contains no duplicate GIDs for interactive users with the following command:

$ cut -d : -f 3 /etc/group | uniq -d

If the system has duplicate GIDs, this is a finding.

Vulnerability Number

V-258061

Documentable

False

Rule Version

RHEL-09-411110

Severity Override Guidance

Verify that RHEL 9 contains no duplicate GIDs for interactive users with the following command:

$ cut -d : -f 3 /etc/group | uniq -d

If the system has duplicate GIDs, this is a finding.

Check Content Reference

Target Key

5551