screen does not log successful authentication messages on unlock in accordance with STIG GEN003660
Issue
The screen utility does not log successful authentication messages on tty unlock in accordance with STIG GEN003660
Currently when a user successfully unlocks a tty that is locked by screen, there is no syslog message recording the event.
According to the following STIG requirement, screen should log both authentication success and failure events, including upon successful authentication to unlock the tty.
Group ID (Vulid): V-12004
Group Title: GEN003660
Rule ID: SV-12505r2_rule
Severity: CAT II
Rule Version (STIG-ID): GEN003660
Rule Title: The system must log authentication informational data.
http://www.stigviewer.com/check/V-12004
Environment
- Red Hat Enterprise Linux (RHEL) 6
- Red Hat Enterprise Linux (RHEL) 7.0
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.
Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.
