Because of this improper ownership some things that should succeed seem to fail. The issue I found was with the fact that gepguser could not access its own .profile file in it's own home directory. This caused some STIG testing scripts to fail and the work around was to do: sudo chown -R gepguser:gegroup /opt/google/.users/gepguser for those scripts to work. IDK of any other bad effects this might have but it's really hard to say this won't cause other issues we don't know about yet. When we create these users and use a custom home directory like this we should ensure proper ownership is given. This can be a trap for other issues to spring up unexpectantly in the future so it would be a good thing (and probably simple thing) to fix.
Because of this improper ownership some things that should succeed seem to fail. The issue I found was with the fact that gepguser could not access its own .profile file in it's own home directory. This caused some STIG testing scripts to fail and the work around was to do: sudo chown -R gepguser:gegroup /opt/google/.users/gepguser for those scripts to work. IDK of any other bad effects this might have but it's really hard to say this won't cause other issues we don't know about yet. When we create these users and use a custom home directory like this we should ensure proper ownership is given. This can be a trap for other issues to spring up unexpectantly in the future so it would be a good thing (and probably simple thing) to fix.