Detections
Analytics

1.110 SOL-11.1-040450

Information

The operating system, upon successful logon, must display to the user the date and time of the last logon (access).

GROUP ID: V-216125RULE ID: SV-216125r987814

Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators.

Solution

The root role is required for this action.

pfedit /etc/ssh/sshd_config

Locate the line containing:

PrintLastLog no

and place a comment sign ("")at the beginning of the line or delete the line

PrintLastLog no

Restart the ssh service

pfexec svcadm restart svc:/network/ssh

See Also

https://workbench.cisecurity.org/benchmarks/23873

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-9, CAT|III, CCI|CCI-000052, Rule-ID|SV-216125r987814_rule, STIG-ID|SOL-11.1-040450, Vuln-ID|V-216125

Plugin: Unix

Control ID: bcc3d0f5997e6be633daf57c005e7e56190b122b106792093daa2cf9218b8da4