Detections
Analytics

1.313 OL09-00-002411

Information

OL 9 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.

GROUP ID: V-271750
RULE ID: SV-271750r1091962

Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.

Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010

Solution

Configure OL 9 to exit interactive command shell user sessions after 15 minutes of inactivity.

Add or edit the following line in "/etc/profile.d/tmout.sh":

#!/bin/bash

declare -xr TMOUT=900

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-11a., 800-53|SC-10, CCI|CCI-000057, CCI|CCI-001133, Rule-ID|SV-271750r1091962_rule, STIG-ID|OL09-00-002411, Vuln-ID|V-271750

Plugin: Unix

Control ID: b523eb21739b055579121c859ab4ede239e813ef6d99b778d91241f170f3ff99