The OL 8 lastlog command must be group-owned by root.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-248707	OL08-00-020264	SV-248707r779687_rule		Medium

Description
Unauthorized disclosure of the contents of the /var/log/lastlog file can reveal system data to attackers, thus compromising its confidentiality.

STIG	Date
Oracle Linux 8 Security Technical Implementation Guide	2022-12-06

Details

Check Text ( C-52141r779685_chk )
Verify the "lastlog" command is group-owned by root with the following command: $ sudo ls -l /usr/bin/lastlog -rwxr-x---. 1 root root 21200 Nov 4 22:51 /usr/bin/lastlog If the "lastlog" command is not group-owned by root, this is a finding.

Fix Text (F-52095r779686_fix)
Configure the "lastlog" command for OL 8 to be group-owned by root with the following command: $ sudo chgrp root /usr/bin/lastlog