Back to bug 2228461

Who When What Removed Added
Red Hat Bugzilla 2023-08-02 12:19:43 UTC Pool ID sst_security_compliance_rhel_8
Milan Lysonek 2023-08-02 13:58:33 UTC Doc Type If docs needed, set a value Enhancement
Doc Text Feature:
Extend the criteria used for selecting interactive users in order to avoid special users without shell to be considered interactive users.

Reason:
Rules related to interactive users where considering any user with uid >= 1000 as interactive users. However, there are valid cases where users with uid >= 1000 have no interactive shell and therefore should not be considered interactive users.

Result:
All rules related to interactive users are aligned using the same criteria to identify interactive users in a system. These criteria are:
- uid >= 1000
- except nobody and nfsnobody users
- except users with /sbin/nologin shell
Red Hat One Jira (issues.redhat.com) 2023-08-02 13:59:07 UTC Link ID Red Hat Issue Tracker RHELPLAN-164208
Jan Černý 2023-08-10 07:59:27 UTC Status NEW MODIFIED
Fixed In Version scap-security-guide-0.1.69-2.el8_6
AutoMiloš 2023-08-10 09:36:08 UTC Keywords AutoVerified
Matus Marhefka 2023-08-10 09:47:12 UTC Keywords AutoVerified
errata-xmlrpc 2023-08-10 10:00:52 UTC Status MODIFIED ON_QA
Milan Lysonek 2023-08-14 13:33:13 UTC Status ON_QA VERIFIED
QA Contact qe-baseos-security mlysonek

Back to bug 2228461