Detections
Analytics

1.112 SOL-11.1-040450

Information

The operating system, upon successful logon, must display to the user the date and time of the last logon (access).

GROUP ID: V-216362
RULE ID: SV-216362r987814

Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators.

Solution

The root role is required for this action.

# pfedit /etc/ssh/sshd_config

Locate the line containing:

PrintLastLog no

and place a comment sign ("# ")at the beginning of the line or delete the line

# PrintLastLog no

Restart the ssh service

# pfexec svcadm restart svc:/network/ssh

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-9, CAT|III, CCI|CCI-000052, Rule-ID|SV-216362r987814_rule, STIG-ID|SOL-11.1-040450, Vuln-ID|V-216362

Plugin: Unix

Control ID: 6283f31505111e42a009e7f6534eec89668363784cf0675a9d397ec1df2c585f