Detections
Analytics
ALMA-09-001450 - AlmaLinux OS 9 must initiate a session lock for graphical user interfaces when the screensaver is activated.
Information
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to logout because of the temporary nature of the absence.Solution
Configure AlmaLinux OS 9 to initiate a session lock for graphical user interfaces when a screensaver is activated.Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
$ touch /etc/dconf/db/local.d/00-screensaver
[org/gnome/desktop/screensaver]
lock-delay=uint32 5
The "uint32" must be included along with the integer key values as shown.
Update the system databases:
$ dconf update
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r6
Category: ACCESS CONTROL
References: 800-53|AC-11a., CAT|II, CCI|CCI-000057, Rule-ID|SV-269106r1049988_rule, STIG-ID|ALMA-09-001450, Vuln-ID|V-269106
Plugin: Unix
Control ID: 9008bd96b403e67994d405b8c8628ee2c96a904ba842815d3ee3744419101e2b