Detections
Analytics

1.200 OL08-00-020340

Information

OL 8 must display the date and time of the last successful account logon upon logon.

GROUP ID: V-248717
RULE ID: SV-248717r991589

Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.

Solution

Configure OL 8 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin".

Add the following line to the top of "/etc/pam.d/postlogin":

session required pam_lastlog.so showfailed

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-9, CAT|III, CCI|CCI-000052, Rule-ID|SV-248717r991589_rule, STIG-ID|OL08-00-020340, Vuln-ID|V-248717

Plugin: Unix

Control ID: 8af08252b6de2875986e6de84d641dd542a7753022c34214d614b104ffc34d1e