Detections
Analytics

1.363 RHEL-10-700920

Information

RHEL 10 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.

GROUP ID: V-281295RULE ID: SV-281295r1166837

Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.

Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010

Solution

Configure RHEL 10 to exit interactive command shell user sessions after 15 minutes of inactivity.

Add or edit the following line in "/etc/profile.d/tmout.sh":

#!/bin/bash

declare -xr TMOUT=600

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-11a., 800-53|SC-10, CAT|II, CCI|CCI-000057, CCI|CCI-001133, Rule-ID|SV-281295r1166837_rule, STIG-ID|RHEL-10-700920, Vuln-ID|V-281295

Plugin: Unix

Control ID: 2841db632ed5362d766c951566488a28ea8de569d3b612ab1e3159c035870539