Detections
Analytics

1.158 OL08-00-020035

Information

OL 8 must terminate idle user sessions.

GROUP ID: V-257259RULE ID: SV-257259r970703

Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.

Solution

Configure OL 8 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:

StopIdleSessionSec=900

The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:

$ sudo systemctl restart systemd-logind

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-10, CAT|II, CCI|CCI-001133, Rule-ID|SV-257259r970703_rule, STIG-ID|OL08-00-020035, Vuln-ID|V-257259

Plugin: Unix

Control ID: a14e9580217ec1e76ac281195b52eddf1fb1e828f7fb0dd950c9cd47cd747a43