STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must assign a primary group to all interactive users.

DISA Rule

SV-281174r1166474_rule

Vulnerability Number

V-281174

Group Title

SRG-OS-000104-GPOS-00051

Rule Version

RHEL-10-600150

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

Configure RHEL 10 so that all GIDs referenced in "/etc/passwd" are defined in "/etc/group".

Edit the file "/etc/passwd" and ensure that every user's GID is a valid GID.

Check Contents

Verify RHEL 10 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Vulnerability Number

V-281174

Documentable

False

Rule Version

RHEL-10-600150

Severity Override Guidance

Verify RHEL 10 interactive users have a valid GID.

Check that the interactive users have a valid GID with the following command:

$ sudo pwck -r

If pwck reports "no group" for any interactive user, this is a finding.

Check Content Reference

M

Target Key

5733