STIGQter: STIG Summary: Solaris 10 X86 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 22 Jan 2021:

The system must display the date and time of the last successful account login upon login.

DISA Rule

SV-227578r603266_rule

Vulnerability Number

V-227578

Group Title

SRG-OS-000025

Rule Version

GEN000452

Severity

CAT III

CCI(s)

• CCI-000052 - The information system notifies the user, upon successful logon (access) to the system, of the date and time of the last logon (access).

Weight

10

Fix Recommendation

Configure the system to display the date and time of the last successful login upon logging in.

Enable PrintLastLog in the SSH daemon.

To enable PrintLastLog in the SSH daemon, remove any lines disabling this option from /etc/ssh/sshd_config.

Check Contents

Determine if the system displays the date and time of the last successful login upon logging in. This can be accomplished by logging into the system and verifying whether or not the necessary information is displayed. If the system does not provide this information upon login, this is a finding.

Last login information is provided automatically by the login(1) program for telnet and console login sessions.

Verify the SSH daemon is configured to display last login information.

# grep -i PrintLastLog /etc/ssh/sshd_config
If PrintLastLog is present in the configuration and not disabled, this is not a finding. Otherwise, this is a finding.

Vulnerability Number

V-227578

Documentable

False

Rule Version

GEN000452

Severity Override Guidance

Determine if the system displays the date and time of the last successful login upon logging in. This can be accomplished by logging into the system and verifying whether or not the necessary information is displayed. If the system does not provide this information upon login, this is a finding.

Last login information is provided automatically by the login(1) program for telnet and console login sessions.

Verify the SSH daemon is configured to display last login information.

# grep -i PrintLastLog /etc/ssh/sshd_config
If PrintLastLog is present in the configuration and not disabled, this is not a finding. Otherwise, this is a finding.

Check Content Reference

M

Target Key

4061

Comments