GEN003660 - The system must log authentication informational data - 'auth.info'

Information

Monitoring and recording successful and unsuccessful logins assists in tracking unauthorized access to the system.

Solution

Edit /etc/syslog.conf and add local log destinations for auth.* or both auth.notice and auth.info.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip