← Back to Red Hat Enterprise Linux 10 Security Technical Implementation Guide

V-281202

CAT II (Medium)

RHEL 10 must have a unique group ID (GID) for each group in "/etc/group".

Rule ID

SV-281202r1166558_rule

STIG

Red Hat Enterprise Linux 10 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000764

Discussion

To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.

Check Content

Verify RHEL 10 contains no duplicate GIDs for interactive users with the following command:

 $  cut -d : -f 3 /etc/group | uniq -d

If the system has duplicate GIDs, this is a finding.

Fix Text

Configure RHEL 10 to contain no duplicate GIDs for interactive users.

Edit the file "/etc/group", and provide each group that has a duplicate GID with a unique GID.