SUSE Linux Enterprise Server 12 STIG Version Comparison

There are 5 differences between versions v3 r2 (Jan. 30, 2025) (the "left" version) and v3 r4 (Jan. 5, 2026) (the "right" version).

Check SLES-12-010390 was removed from the benchmark in the "right" version. The text below reflects the old wording.

This check's original form is available here.

Title

The SUSE operating system must display the date and time of the last successful account logon upon logon.

Check Content

Verify the SUSE operating system users are provided with feedback on when account accesses last occurred. Check that "pam_lastlog" is used and not silent with the following command: > grep pam_lastlog /etc/pam.d/login session required pam_lastlog.so showfailed If "pam_lastlog" is missing from "/etc/pam.d/login" file, the "silent" option is present, or the returned line is commented out, this is a finding.

Discussion

Providing users with feedback on when account accesses last occurred facilitates user recognition and reporting of unauthorized account use.

Fix

Configure the SUSE operating system to provide users with feedback on when account accesses last occurred by setting the required configuration options in "/etc/pam.d/login". Add the following line to the top of "/etc/pam.d/login": session required pam_lastlog.so showfailed