STIGQter: STIG Summary: Oracle Linux 9 Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

OL 9 interactive users must have a primary group that exists.

DISA Rule

SV-271834r1208734_rule

Vulnerability Number

V-271834

Group Title

SRG-OS-000104-GPOS-00051

Rule Version

OL09-00-003005

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

Configure the system so that all GIDs are referenced in "/etc/passwd" are defined in "/etc/group".

Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.

Check Contents

Verify that OL 9 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Vulnerability Number

V-271834

Documentable

False

Rule Version

OL09-00-003005

Severity Override Guidance

Verify that OL 9 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Check Content Reference

M

Target Key

5680