The operating system, upon successful logon, must display to the user the date and time of the last logon or access via a local console or tty.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
RHEL-06-000506	RHEL-06-000506	RHEL-06-000506_rule		Medium

Description
Users need to be aware of activity that occurs regarding their accounts. Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators. At console or tty logon, a user must be presented with the last successful login date and time. The "hushlogin" file determines whether this occurs.

Description

Users need to be aware of activity that occurs regarding their accounts. Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators. At console or tty logon, a user must be presented with the last successful login date and time. The "hushlogin" file determines whether this occurs.

STIG	Date
Red Hat Enterprise Linux 6 Security Technical Implementation Guide	2013-02-05

Details

Check Text ( C-RHEL-06-000506_chk )
Verify there are no "hushlogin" files active on the system: # ls -l /etc/hushlogins For each home directory stored in "/etc/passwd": # ls ~/.hushlogin If there are any "hushlogin" files on the system, this is a finding.

Fix Text (F-RHEL-06-000506_fix)
Remove any "hushlogin" files from the system: # rm /etc/hushlogins # rm ~/.hushlogin