STIG ID: OL08-00-020340 | SRG: SRG-OS-000480-GPOS-00227 | Severity: low | CCI: | Vulnerability Id: V-248717
Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.
Configure OL 8 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/postlogin".
Add the following line to the top of "/etc/pam.d/postlogin":
session required pam_lastlog.so showfailed
Verify users are provided with feedback on when account accesses last occurred with the following command:
$ sudo grep pam_lastlog /etc/pam.d/postlogin
session required pam_lastlog.so showfailed
If "pam_lastlog" is missing from the "/etc/pam.d/postlogin" file or the silent option is present, this is a finding.