RHEL 9 groups must have unique Group ID (GID).

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-258061RHEL-09-411110SV-258061r958482_ruleCCI-000764medium
Description
To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.
STIGDate
Red Hat Enterprise Linux 9 Security Technical Implementation Guide2025-05-14

Details

Check Text (C-258061r958482_chk)

Verify that RHEL 9 contains no duplicate GIDs for interactive users with the following command: $ cut -d : -f 3 /etc/group | uniq -d If the system has duplicate GIDs, this is a finding.

Fix Text (F-61726r926169_fix)

Edit the file "/etc/group" and provide each group that has a duplicate GID with a unique GID.