Detections
Analytics

1.288 RHEL-09-412035

Information

RHEL 9 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.

GROUP ID: V-258068
RULE ID: SV-258068r1069388

Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.

Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010

Solution

Configure RHEL 9 to exit interactive command shell user sessions after 10 minutes of inactivity.

Add or edit the following line in "/etc/profile.d/tmout.sh":

#!/bin/bash

declare -xr TMOUT=600

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-11a., 800-53|SC-10, CAT|II, CCI|CCI-000057, CCI|CCI-001133, Rule-ID|SV-258068r1069388_rule, STIG-ID|RHEL-09-412035, Vuln-ID|V-258068

Plugin: Unix

Control ID: 1b8dd914f53ac727af9448ac00a5e1dcb4d9015a79818207907e70ca71b7e20d