Detections
Analytics

1.290 OL09-00-002376

Information

OL 9 must terminate idle user sessions.

GROUP ID: V-279935
RULE ID: SV-279935r1156358

Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.

Solution

Configure OL 9 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:

StopIdleSessionSec=600

The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:

$ sudo systemctl restart systemd-logind

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-10, CCI|CCI-001134, Rule-ID|SV-279935r1156358_rule, STIG-ID|OL09-00-002376, Vuln-ID|V-279935

Plugin: Unix

Control ID: aecf049c276998da5387ab381e8f24f383829cbf35f62813bac65aa2f02564f6