======6.2.9 Ensure users own their home directories (Scored)======
=====Profile Applicability=====
Level 1 - Server
Level 1 - Workstation
=====Description=====
The user home directory is space defined for the particular user to set local environment variables and to store personal files..
=====Rationale=====
Since the user is accountable for files stored in the user home directory, the user must be the owner of the directory.
=====Audit=====
Run the following script and verify no results are returned:
#!/bin/bash
cat /etc/passwd | awk -F: '{ print $1 " " $3 " " $6 }' | while read user uid dir; do
if [ $uid -ge 1000 -a -d "$dir" -a $user != "nfsnobody" ]; then
owner=$(stat -L -c "%U" "$dir")
if [ "$owner" != "$user" ]; then
echo "The home directory ($dir) of user $user is owned by $owner."
fi
fi
done
=====Remediation=====
Change the ownership of any home directories that are not owned by the defined user to the correct user.