Detections
Analytics
OL09-00-002352 - OL 9 SSH daemon must display the date and time of the last successful account logon upon an SSH logon.
Information
Providing users feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.Solution
Configure the SSH daemon to provide users with feedback on when account accesses last occurred.Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d" or uncomment the line and set the value to "yes":
PrintLastLog yes
The SSH service must be restarted for changes to take effect:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-271715r1091857_rule, STIG-ID|OL09-00-002352, Vuln-ID|V-271715
Plugin: Unix
Control ID: 44c9a551a6e43798fe3cb8c474b5c316b39d705d0de8aae65996f2c854461b2a