The operating system, upon successful logon, must display to the user the date and time of the last logon or access via a local console or tty.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| RHEL-06-000506 | RHEL-06-000506 | RHEL-06-000506_rule | Medium |
| Description |
|---|
| Users need to be aware of activity that occurs regarding their accounts. Providing users with information regarding the date and time of their last successful login allows the user to determine if any unauthorized activity has occurred and gives them an opportunity to notify administrators. At console or tty logon, a user must be presented with the last successful login date and time. The "hushlogin" file determines whether this occurs. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2013-02-05 |
Details
| Check Text ( C-RHEL-06-000506_chk ) |
|---|
| Verify there are no "hushlogin" files active on the system: # ls -l /etc/hushlogins For each home directory stored in "/etc/passwd": # ls ~ If there are any "hushlogin" files on the system, this is a finding. |
| Fix Text (F-RHEL-06-000506_fix) |
|---|
| Remove any "hushlogin" files from the system: # rm /etc/hushlogins # rm ~ |