UBTU-16-010060 - Ubuntu operating system sessions must be automatically logged out after 15 minutes of inactivity - timeout

Information

An Ubuntu operating system needs to be able to identify when a user's sessions has idled for longer than 15 minutes. The Ubuntu operating system must logout a users' session after 15 minutes to prevent anyone from gaining access to the machine while the user is away.

Solution

Configure the Ubuntu operating system to initiate a session logout after a '15' minutes of inactivity.

Create a file to contain the system-wide session auto logout script (if it does not already exist) with the following command:

# sudo touch /etc/profile.d/autologout.sh

Add the following lines to the '/etc/profile.d/autologout.sh' script:

TMOUT=900
readonly TMOUT
export TMOUT

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11a., CAT|II, CCI|CCI-000057, Rule-ID|SV-214945r610931_rule, STIG-ID|UBTU-16-010060, STIG-Legacy|SV-90121, STIG-Legacy|V-75441, Vuln-ID|V-214945

Plugin: Unix

Control ID: 470cc4576e1c58a47026fe6cc7594adac09cba00ba98d34298f635cccdd41e9c