Back to bug 2228434

Who When What Removed Added
Red Hat Bugzilla 2023-08-02 12:07:19 UTC Pool ID sst_security_compliance_rhel_8
Milan Lysonek 2023-08-02 13:16:01 UTC Doc Type If docs needed, set a value Enhancement
Doc Text .Better definition of interactive users

The rules in the `scap-security-guide` package now provide a consistent experience regarding interactive users configuration. Previously, various rules used different approaches for identifying interactive and non-interactive users. Starting from this release, we have unified the definitions of interactive users. Users accounts with the UID greater than or equal 1000 are now considered interactive, with the exception of `nobody` and `nfsnobody` user accounts and with the exception of user accounts that use `/sbin/nologin` as the login shell.

This change affects the following rules:

- accounts_umask_interactive_users
- accounts_user_dot_user_ownership
- accounts_user_dot_group_ownership
- accounts_user_dot_no_world_writable_programs
- accounts_user_interactive_home_directory_defined
- accounts_user_interactive_home_directory_exists
- accounts_users_home_files_groupownership
- accounts_users_home_files_ownership
- accounts_users_home_files_permissions
- file_groupownership_home_directories
- file_ownership_home_directories
- file_permissions_home_directories
- file_permissions_home_dirs
- no_forward_files
Red Hat One Jira (issues.redhat.com) 2023-08-02 13:18:08 UTC Link ID Red Hat Issue Tracker RHELPLAN-164170
Jan Černý 2023-08-10 07:59:09 UTC Status NEW MODIFIED
Fixed In Version scap-security-guide-0.1.69-2.el8_6
errata-xmlrpc 2023-08-10 10:00:42 UTC Status MODIFIED ON_QA
Milan Lysonek 2023-08-14 13:16:41 UTC QA Contact qe-baseos-security mlysonek
Status ON_QA VERIFIED

Back to bug 2228434