SV-282731r1201173_rule
V-282731
SRG-OS-000480-GPOS-00227
TOSS-05-000320
CAT III
10
Configure TOSS 5 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin".
Add the following line to the top of "/etc/pam.d/postlogin":
session required pam_lastlog.so showfailed
Verify users are provided with feedback on when account accesses last occurred using the following command:
$ sudo grep pam_lastlog /etc/pam.d/postlogin
session required pam_lastlog.so showfailed
If "pam_lastlog" is missing from "/etc/pam.d/postlogin" file, or the silent option is present, this is a finding.
V-282731
False
TOSS-05-000320
Verify users are provided with feedback on when account accesses last occurred using the following command:
$ sudo grep pam_lastlog /etc/pam.d/postlogin
session required pam_lastlog.so showfailed
If "pam_lastlog" is missing from "/etc/pam.d/postlogin" file, or the silent option is present, this is a finding.
M
5738