Back to bug 2228433

Who When What Removed Added
Red Hat Bugzilla 2023-08-02 12:07:08 UTC Pool ID sst_security_compliance_rhel_8
Milan Lysonek 2023-08-02 13:15:55 UTC Doc Text .Better definition of interactive users

The rules in the `scap-security-guide` package now provide a consistent experience regarding interactive users configuration. Previously, various rules used different approaches for identifying interactive and non-interactive users. Starting from this release, we have unified the definitions of interactive users. Users accounts with the UID greater than or equal 1000 are now considered interactive, with the exception of `nobody` and `nfsnobody` user accounts and with the exception of user accounts that use `/sbin/nologin` as the login shell.

This change affects the following rules:

- accounts_umask_interactive_users
- accounts_user_dot_user_ownership
- accounts_user_dot_group_ownership
- accounts_user_dot_no_world_writable_programs
- accounts_user_interactive_home_directory_defined
- accounts_user_interactive_home_directory_exists
- accounts_users_home_files_groupownership
- accounts_users_home_files_ownership
- accounts_users_home_files_permissions
- file_groupownership_home_directories
- file_ownership_home_directories
- file_permissions_home_directories
- file_permissions_home_dirs
- no_forward_files
Doc Type If docs needed, set a value Enhancement
Red Hat One Jira (issues.redhat.com) 2023-08-02 13:17:59 UTC Link ID Red Hat Issue Tracker RHELPLAN-164168
Jan Černý 2023-08-10 12:26:33 UTC Status NEW POST
Matěj Týč 2023-08-11 12:29:28 UTC Status POST MODIFIED
AutoMiloš 2023-08-11 17:36:01 UTC Fixed In Version scap-security-guide-0.1.69-1.el8_8
Keywords AutoVerified

Back to bug 2228433