← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-11946

CAT II (Medium)

UIDs reserved for system accounts must not be assigned to non-system accounts.

Rule ID

SV-44825r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000366

Discussion

Reserved UIDs are typically used by system software packages. If non-system accounts have UIDs in this range, they may conflict with system software, possibly leading to the user having permissions to modify system files.

Check Content

Check the UID assignments for all accounts.

# awk -F: '$3 <= 499 {printf "%15s:%4s\n", $1, $3}' /etc/passwd | sort -n -t: -k2
Confirm all accounts with a UID of 499 and below are used by a system account. If a UID reserved for system accounts (0 - 499) is used by a non-system account, then this is a finding.

Fix Text

Change the UID numbers for non-system accounts with reserved UIDs (those less or equal to 499).