highsystemverified ✓
Ensure no duplicate group names exist
no-duplicate-groupnames · RHEL ≥ 8 · 1 impl
Description
All group names in /etc/group must be unique. Duplicate group names can cause unpredictable behavior and security issues.
Rationale
Duplicate group names can lead to confusion about group membership and may result in incorrect access control decisions if groups share the same name with different GIDs.
Check → Remediate
Checkcommand
cut -d: -f1 /etc/group | sort | uniq -d
- expected_exit:
- 0
Remediatemanual
- note:
- Review /etc/group and resolve any duplicate group names by either removing the duplicate groups or renaming them to unique values.
Framework references
CIS
rhel9 7.2.7rhel8 7.2.7rhel10 7.2.7
NIST 800-53
IA-2AC-2
Live verification
rhel10:checkrhel8:checkrhel9:check
#accounts#group#security