RHEL 10 must have a unique group ID (GID) for each group in "/etc/group".

STIG ID: RHEL-10-600470  |  SRG: SRG-OS-000104-GPOS-00051 |  Severity: medium (CAT II)  |  CCI: CCI-000764 |  Vulnerability Id: V-281202

Vulnerability Discussion

To ensure accountability and prevent unauthenticated access, groups must be identified uniquely to prevent potential misuse and compromise of the system.

Check

Verify RHEL 10 contains no duplicate GIDs for interactive users with the following command:

$ cut -d : -f 3 /etc/group | uniq -d

If the system has duplicate GIDs, this is a finding.

Fix

Configure RHEL 10 to contain no duplicate GIDs for interactive users.

Edit the file "/etc/group", and provide each group that has a duplicate GID with a unique GID.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.