passwd_duplicate_home
This built-in function ensures that each non-system user (whose UID is greater than 100) in /etc/passwd
has a unique home directory.
Each username in /etc/passwd
must have a unique home directory. If users share the same home directory, then one can force the other to execute arbitrary commands by modifying the startup files (.profile
, etc.) or by putting rogue binaries in the home directory itself. In addition, a shared home directory defeats user accountability.
Compliance requirements mandate that each user have a unique home directory.
Usage
<item>
name: "passwd_duplicate_home"
description: "(arbitrary user comment)"
</item>