Description of problem:
After STIG with GUI kickstart installation, accounts_users_home_files_* rules list /var/lib/nfs/ files as they have incorrect permission/ownership.
SCAP Security Guide Version:
ece8437
Operating System Version:
RHEL 7.9
Steps to Reproduce:
- Install RHEL 7.9 using kickstart with STIG with GUI profile
Actual Results:
accounts_users_home_files_* check files in /var/lib/nfs/ directory
Expected Results:
Only files in /home/USER/ are checked
Additional Information/Debugging Steps:
OVAL details from accounts_users_home_files_groupownership rule:
All home directories files are group-owned by a local interactive user
failed because of these items:
| Path |
Type |
UID |
GID |
Size (B) |
Permissions |
| /home/testuser/oscap_version |
regular |
0 |
0 |
5613 |
rw-r--r-- |
| /var/lib/nfs/etab |
regular |
0 |
0 |
0 |
rw-r--r-- |
| /home/testuser/.bash_profile |
regular |
1000 |
1000 |
193 |
rw-r--r-- |
| /home/testuser/.bashrc |
regular |
1000 |
1000 |
231 |
rw-r--r-- |
| /home/testuser/.bash_logout |
regular |
1000 |
1000 |
18 |
rw-r--r-- |
| /var/lib/nfs/xtab |
regular |
0 |
0 |
0 |
rw-r--r-- |
| /var/lib/nfs/state |
regular |
29 |
29 |
0 |
rw-r--r-- |
| /var/lib/nfs/rmtab |
regular |
0 |
0 |
0 |
rw-r--r-- |
| /var/lib/nfs/rpc_pipefs/gssd/clntXX/gssd |
fifo |
0 |
0 |
0 |
rw------- |
| /var/lib/nfs/rpc_pipefs/gssd/clntXX/info |
regular |
0 |
0 |
0 |
r-------- |
| /home/testuser/.ssh/authorized_keys |
regular |
1000 |
1000 |
205 |
rw------- |
| /home/testuser/stderr.txt |
regular |
1000 |
1000 |
794 |
rw-rw-r-- |
Description of problem:
After STIG with GUI kickstart installation,
accounts_users_home_files_*rules list/var/lib/nfs/files as they have incorrect permission/ownership.SCAP Security Guide Version:
ece8437
Operating System Version:
RHEL 7.9
Steps to Reproduce:
Actual Results:
accounts_users_home_files_*check files in/var/lib/nfs/directoryExpected Results:
Only files in
/home/USER/are checkedAdditional Information/Debugging Steps:
OVAL details from
accounts_users_home_files_groupownershiprule:All home directories files are group-owned by a local interactive user failed because of these items: