Users must have a valid home directory assignment.

All users must be assigned a home directory in the passwd file. Failure to have a home directory may result in the user being put in the root directory.

The root role is required.

Determine if each user has a valid home directory.

# logins -xo | while read line; do user=`echo ${line} | awk -F: '{ print $1 }'` home=`echo ${line} | awk -F: '{ print $6 }'` if [ -z "${home}" ]; then echo ${user} fi done

If output is produced, this is a finding.

The root role is required.

Correct or justify any items discovered in the check step. Determine if there exists any users who are in passwd but do not have a home directory, and work with those users to determine the best course of action in accordance with site policy. This generally means deleting the user or creating a valid home directory.