STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must ensure that all local interactive user home directories defined in the "/etc/passwd" file must exist.

DISA Rule

SV-281178r1195418_rule

Vulnerability Number

V-281178

Group Title

SRG-OS-000420-GPOS-00186

Rule Version

RHEL-10-600190

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure RHEL 10 interactive users' home directories to exist on the system.

Create home directories to all local interactive users that do not have a home directory assigned. Use the following commands to create the user home directory assigned in "/etc/ passwd":

Note: The example will be for the user "disauser", who has a home directory of "/home/disauser", a user identifier (UID) of "disauser", and a group identifier (GID) of "users assigned" in "/etc/passwd".

$ sudo mkdir /home/disauser
$ sudo chown disauser /home/disauser
$ sudo chgrp users /home/disauser
$ sudo chmod 0750 /home/disauser

Check Contents

Verify RHEL 10 interactive users' home directories exist on the system with the following command:

$ sudo pwck -r
user 'mailnull': directory 'var/spool/mqueue' does not exist

The output should not return any interactive users.

If an interactive user's home directory does not exist, this is a finding.

Vulnerability Number

V-281178

Documentable

False

Rule Version

RHEL-10-600190

Severity Override Guidance

Verify RHEL 10 interactive users' home directories exist on the system with the following command:

$ sudo pwck -r
user 'mailnull': directory 'var/spool/mqueue' does not exist

The output should not return any interactive users.

If an interactive user's home directory does not exist, this is a finding.

Check Content Reference

M

Target Key

5733