← Back to Oracle Linux 8 Security Technical Implementation Guide

V-248707

CAT II (Medium)

The OL 8 lastlog command must be group-owned by root.

Rule ID

SV-248707r958566_rule

STIG

Oracle Linux 8 Security Technical Implementation Guide

Version

V2R8

CCIs

CCI-001314

Discussion

Unauthorized disclosure of the contents of the /var/log/lastlog file can reveal system data to attackers, thus compromising its confidentiality.

Check Content

Verify the "lastlog" command is group-owned by root with the following command: 
 
$ sudo ls -l /usr/bin/lastlog
 
-rwxr-x---. 1  root  root  21200 Nov  4   22:51  /usr/bin/lastlog
 
If the "lastlog" command is not group-owned by root, this is a finding.

Fix Text

Configure the "lastlog" command for OL 8 to be group-owned by root with the following command:  
 
$ sudo chgrp root /usr/bin/lastlog