RHEL-10-700770 - RHEL 10 must initiate a session lock for graphical user interfaces when the screensaver is activated.

Information

A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence.

Satisfies: SRG-OS-000029-GPOS-00010, SRG-OS-000031-GPOS-00012

Solution

Configure RHEL 10 to initiate a session lock for graphical user interfaces when a screensaver is activated.

Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.

Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:

$ sudo vi /etc/dconf/db/local.d/00-screensaver

[org/gnome/desktop/screensaver]
lock-delay=uint32 5

The "uint32" must be included along with the integer key values as shown.

Update the system databases:

$ sudo dconf update

Item Details

Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1

Category: ACCESS CONTROL

Plugin: Unix

Control ID: 405c9ca38f56ed56d0867d6d93ac7d90f63e070e008c217039cf3806ed0f2a4b

Detections

Analytics

RHEL-10-700770 - RHEL 10 must initiate a session lock for graphical user interfaces when the screensaver is activated.

Information

Solution

See Also

Item Details