mediumaccess-controlverified ✓rollback-safe

Ensure local interactive user accounts are assigned a home directory upon creation

useradd-default-home · RHEL ≥ 8 · 1 impl

Description

The useradd command defaults must be configured to assign a home directory to new local interactive user accounts.

Rationale

Without a home directory, users may not have a consistent location for their files and configuration, and audit trails for their activity may be incomplete.

Check → Remediate

Checkcommand

grep -iE '^CREATE_HOME\s*yes' /etc/login.defs

expected_exit:: 0

Remediateconfig_set

path:: /etc/login.defs
key:: CREATE_HOME
value:: yes

Framework references

STIG

V-281171 / RHEL-10-600120V-258043 / RHEL-09-411020V-230324

NIST 800-53

CM-6

Live verification

rhel8:checkrhel9:check

#user-accounts#home-directory#useradd