Skip to content

RHEL 8 must display the date and time of the last successful account logon upon logon.

An XCCDF Rule

Description

Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.

ID
SV-230381r991589_rule
Version
RHEL-08-020340
Severity
Low
References
Updated

Remediation Templates

A Manual Procedure

Configure the operating system to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin". 

Add the following line to the top of "/etc/pam.d/postlogin":

session required pam_lastlog.so showfailed