Vulnerability Discussion

If local interactive users are not assigned a valid home directory, there is no place for the storage and control of files they should own.

Check

Verify that interactive users on the system have a home directory assigned with the following command:

$ awk -F: '($3>=1000)&&($7 !~ /nologin/){print $1, $6}' /etc/passwd

simon /home/simon
test /home/test
testdupe /home/testdupe

Inspect the output and verify that all interactive users (normally users with a UID greater that 1000) have a home directory defined.

If users home directory is not defined, this is a finding.

Fix

Create and assign home directories to all local interactive users on AlmaLinux OS 9 that currently do not have a home directory assigned.