← Back to VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide

V-256554

CAT II (Medium)

The Photon operating system must configure sshd to display the last login immediately after authentication.

Rule ID

SV-256554r991589_rule

STIG

VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide

Version

V1R4

CCIs

CCI-000366

Discussion

Providing users with feedback on the last time they logged on via Secure Shell (SSH) facilitates user recognition and reporting of unauthorized account use.

Check Content

At the command line, run the following command:

# sshd -T|&grep -i PrintLastLog

Expected result:

PrintLastLog yes

If the output does not match the expected result, this is a finding.

Fix Text

Navigate to and open:

/etc/ssh/sshd_config

Ensure the "PrintLastLog" line is uncommented and set to the following:

PrintLastLog yes

At the command line, run the following command:

# systemctl restart sshd.service