documentation_complete: true

title: 'Ensure All Accounts on the System Have Unique Names'

description: |-
    Ensure accounts on the system have unique names.

    To ensure all accounts have unique names, run the following command:
    <pre>$ sudo getent passwd | awk -F: '{ print $1}' | uniq -d</pre>
    If a username is returned, change or delete the username.

rationale: 'Unique usernames allow for accountability on the system.'

severity: medium

identifiers:
    cce@rhel8: CCE-80674-5
    cce@rhel9: CCE-83628-8
    cce@rhel10: CCE-90323-7
    cce@sle12: CCE-91550-4
    cce@sle15: CCE-85845-6
    cce@slmicro5: CCE-94045-2

references:
    cis@sle12: 6.2.16
    cis@sle15: 6.2.16
    cjis: 5.5.2
    pcidss: Req-8.1.1

ocil_clause: 'a line is returned'

ocil: |-
    To verify all accounts have unique names, run the following command:
    <pre>$ sudo getent passwd | awk -F: '{ print $1}' | uniq -d</pre>
    No output should be returned.
