Detections
Analytics

1.297 RHEL-09-412080

Information

RHEL 9 must terminate idle user sessions.

GROUP ID: V-258077
RULE ID: SV-258077r1014874

Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port that has been left unattended.

Solution

Configure RHEL 9 to log out idle sessions by editing the /etc/systemd/logind.conf file with the following line:

StopIdleSessionSec=900

The "logind" service must be restarted for the changes to take effect. To restart the "logind" service, run the following command:

$ sudo systemctl restart systemd-logind

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-10, CAT|II, CCI|CCI-001133, Rule-ID|SV-258077r1014874_rule, STIG-ID|RHEL-09-412080, Vuln-ID|V-258077

Plugin: Unix

Control ID: 5ebfeac93986e6c16a375c59dedd45558e2e3fe799624178134be37235bf86ec