SUSE Linux Enterprise Micro (SLEM) 5 STIG Version Comparison

There are 7 differences between versions v1 r1 (June 13, 2024) (the "left" version) and v1 r3 (Jan. 5, 2026) (the "right" version).

Check SLEM-05-412010 was removed from the benchmark in the "right" version. The text below reflects the old wording.

This check's original form is available here.

Title

SLEM 5 must display the date and time of the last successful account logon upon logon.

Check Content

Verify SLEM 5 users are provided with feedback on when account accesses last occurred with the following command: > grep pam_lastlog /etc/pam.d/login session required pam_lastlog.so showfailed If "pam_lastlog" is missing from "/etc/pam.d/login" file, the "silent" option is present, the second column value different from "requisite", or the returned line is commented out, this is a finding.

Discussion

Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.

Fix

Configure SLEM 5 to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/login". Add the following line to the top of "/etc/pam.d/login": session required pam_lastlog.so showfailed