STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

The OL 8 lastlog command must have a mode of "0750" or less permissive.

DISA Rule

SV-283459r1188521_rule

Vulnerability Number

V-283459

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

OL08-00-020262

Severity

CAT II

CCI(s)

• CCI-000213 - Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Configure the mode of the "lastlog" command for OL 8 to "0750" with the following command:

$ sudo chmod 0750 /usr/bin/lastlog

Check Contents

Verify the "lastlog" command has a mode of "0750" or less permissive with the following command:

$ sudo stat -c "%a %n" /usr/bin/lastlog

750 /usr/bin/lastlog

If the "lastlog" command has a mode more permissive than "0750", this is a finding.

Vulnerability Number

V-283459

Documentable

False

Rule Version

OL08-00-020262

Severity Override Guidance

Verify the "lastlog" command has a mode of "0750" or less permissive with the following command:

$ sudo stat -c "%a %n" /usr/bin/lastlog

750 /usr/bin/lastlog

If the "lastlog" command has a mode more permissive than "0750", this is a finding.

Check Content Reference

M

Target Key

5416