Detections
Analytics

5.4.3.16 Ensure StopIdleSessionSec is configured

Information

The Operating System (OS) must terminate idle user sessions.

Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.

Solution

Configure RHEL 8 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:

StopIdleSessionSec=900

The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:

# systemctl restart systemd-logind

Note: To preserve running user programs such as tmux, uncomment and/or edit "KillUserProccesses=no" in "/etc/systemd/logind.conf".

See Also

https://workbench.cisecurity.org/benchmarks/19886

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-2(5), 800-53|AC-7, 800-53|AC-11, 800-53|AC-11(1), 800-53|AC-12, 800-53|AC-19, 800-53|SC-10, CAT|II, CSCv7|16.11, Rule-ID|SV-257258r942953_rule, STIG-ID|RHEL-08-020035, Vuln-ID|V-257258

Plugin: Unix

Control ID: 50c3164065cfb6298c48d411d59e6087704944e62967a7e973070a3bffa98cbd