Detections
Analytics
UBTU-16-030260 - The system must display the date and time of the last successful account logon upon an SSH logon.
Information
Providing users with feedback on when account accesses via SSH last occurred facilitates user recognition and reporting of unauthorized account use.Solution
Add or edit the following lines in the '/etc/ssh/sshd_config' file:PrintLastLog yes
The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command:
# sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215128r610931_rule, STIG-ID|UBTU-16-030260, STIG-Legacy|SV-90515, STIG-Legacy|V-75835, Vuln-ID|V-215128
Plugin: Unix
Control ID: 0dc59a7f3b5b93149125aec6c676493e01787ff336b9235f01fedbdba000857b