Detections
Analytics
UBTU-22-271025 - Ubuntu 22.04 LTS must initiate a graphical session lock after 15 minutes of inactivity.
Information
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.The session lock is implemented at the point where session activity can be determined.
Regardless of where the session lock is determined and implemented, once invoked, a session lock of Ubuntu 22.04 LTS must remain in place until the user reauthenticates. No other activity aside from reauthentication must unlock the system.
Solution
Configure Ubuntu 22.04 LTS to lock the current graphical user interface session after 15 minutes of inactivity.Create or edit a file named /etc/dconf/db/local.d/00-screensaver with the following contents:
[org/gnome/desktop/screensaver]
lock-enabled=true
lock-delay=0
[org/gnome/desktop/session]
idle-delay=600
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_22-04_LTS_V2R8_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 22.04 LTS STIG v2r8
Category: ACCESS CONTROL
References: 800-53|AC-11a., CAT|II, CCI|CCI-000057, Rule-ID|SV-260538r1069119_rule, STIG-ID|UBTU-22-271025, Vuln-ID|V-260538
Plugin: Unix
Control ID: 1bc053454dff940e76eeea8f2c0cb0fc870ea7045c5440dd65ce2ad936de3aa8