V-282725

Discussion

If local interactive users are not assigned a valid home directory, there is no place to store and control the files they should own.

Check Content

Verify interactive users on the system have a home directory assigned using the following command:
 
$ sudo awk -F: '($3>=1000)&&($7 !~ /nologin/){print $1, $3, $6}' /etc/passwd

smithk:x:1000:1000:smithk:/home/smithk:/bin/bash
scsaustin:x:1001:1001:scsaustin:/home/scsaustin:/bin/bash
djohnson:x:1002:1002:djohnson:/home/djohnson:/bin/bash

Inspect the output and verify that all interactive users (normally users with a user identifier [UID] greater than 1000) have a home directory defined.

If users home directory is not defined, this is a finding.