STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must assign a home directory to all local interactive users in the "/etc/passwd" file.

DISA Rule

SV-281177r1184748_rule

Vulnerability Number

V-281177

Group Title

SRG-OS-000420-GPOS-00186

Rule Version

RHEL-10-600180

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure RHEL 10 interactive users to have a home directory assigned in the "/etc/passwd" file.

Create and assign home directories to all local interactive users on RHEL 10 that do not have a home directory assigned.

Check Contents

Verify RHEL 10 interactive users have a home directory assigned with the following command:

$ sudo awk -F: '($3>=1000)&&($7 !~ /nologin/){print $1, $3, $6}' /etc/passwd
nsauser:x:1000:1000:nsauser:/home/nsauser:/bin/bash
disauser:x:1001:1001:disauser:/home/disauser:/bin/bash
doduser:x:1002:1002:doduser:/home/doduser:/bin/bash

Inspect the output and verify that all interactive users (normally users with a user identifier [UID] greater than 1000) have a home directory defined.

If a user's home directory is not defined, this is a finding.

Vulnerability Number

V-281177

Documentable

False

Rule Version

RHEL-10-600180

Severity Override Guidance

Verify RHEL 10 interactive users have a home directory assigned with the following command:

$ sudo awk -F: '($3>=1000)&&($7 !~ /nologin/){print $1, $3, $6}' /etc/passwd
nsauser:x:1000:1000:nsauser:/home/nsauser:/bin/bash
disauser:x:1001:1001:disauser:/home/disauser:/bin/bash
doduser:x:1002:1002:doduser:/home/doduser:/bin/bash

Inspect the output and verify that all interactive users (normally users with a user identifier [UID] greater than 1000) have a home directory defined.

If a user's home directory is not defined, this is a finding.

Check Content Reference

M

Target Key

5733