Skip to content

RHEL 7 - accounts_users_home_files_* rules check /var/lib/nfs/ directory #8352

@mildas

Description

@mildas

Description of problem:

After STIG with GUI kickstart installation, accounts_users_home_files_* rules list /var/lib/nfs/ files as they have incorrect permission/ownership.

SCAP Security Guide Version:

ece8437

Operating System Version:

RHEL 7.9

Steps to Reproduce:

  1. Install RHEL 7.9 using kickstart with STIG with GUI profile

Actual Results:

accounts_users_home_files_* check files in /var/lib/nfs/ directory

Expected Results:

Only files in /home/USER/ are checked

Additional Information/Debugging Steps:

OVAL details from accounts_users_home_files_groupownership rule:

All home directories files are group-owned by a local interactive user  failed because of these items:

Path Type UID GID Size (B) Permissions
/home/testuser/oscap_version regular 0 0 5613 rw-r--r--
/var/lib/nfs/etab regular 0 0 0 rw-r--r--
/home/testuser/.bash_profile regular 1000 1000 193 rw-r--r--
/home/testuser/.bashrc regular 1000 1000 231 rw-r--r--
/home/testuser/.bash_logout regular 1000 1000 18 rw-r--r--
/var/lib/nfs/xtab regular 0 0 0 rw-r--r--
/var/lib/nfs/state regular 29 29 0 rw-r--r--
/var/lib/nfs/rmtab regular 0 0 0 rw-r--r--
/var/lib/nfs/rpc_pipefs/gssd/clntXX/gssd fifo 0 0 0 rw-------
/var/lib/nfs/rpc_pipefs/gssd/clntXX/info regular 0 0 0 r--------
/home/testuser/.ssh/authorized_keys regular 1000 1000 205 rw-------
/home/testuser/stderr.txt regular 1000 1000 794 rw-rw-r--

Metadata

Metadata

Assignees

Labels

productization-issueIssue found in upstream stabilization process.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions