Detections
Analytics
RHEL-10-700920 - RHEL 10 must automatically exit interactive command shell user sessions after 15 minutes of inactivity.
Information
Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.Satisfies: SRG-OS-000163-GPOS-00072, SRG-OS-000029-GPOS-00010
Solution
Configure RHEL 10 to exit interactive command shell user sessions after 15 minutes of inactivity.Add or edit the following line in "/etc/profile.d/tmout.sh":
#!/bin/bash
declare -xr TMOUT=600
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|AC-11a., 800-53|SC-10, CAT|II, CCI|CCI-000057, CCI|CCI-001133, Rule-ID|SV-281295r1166837_rule, STIG-ID|RHEL-10-700920, Vuln-ID|V-281295
Plugin: Unix
Control ID: b43f2d31c849783262959324043b7ebbb8749762164767ce2415b899af4008e9