Detections
Analytics

1.149 AZLX-23-002396

Information

Amazon Linux 2023 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.

GROUP ID: V-274142RULE ID: SV-274142r1120414

Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.

Solution

Configure Amazon Linux 2023 to exit interactive command shell user sessions after 10 minutes of inactivity.

Add or edit the following line in "/etc/profile.d/tmout.sh":

#!/bin/bash

declare -xr TMOUT=600

See Also

https://workbench.cisecurity.org/benchmarks/26107

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-11a., 800-53|SC-10, CAT|II, CCI|CCI-000057, CCI|CCI-001133, Rule-ID|SV-274142r1120414_rule, STIG-ID|AZLX-23-002396, Vuln-ID|V-274142

Plugin: Unix

Control ID: 6faf60cff036ce8d478322d2e354bf130792a06aed69a1ec78b145d9d364089c