Detections
Analytics

800-53|AC-11a.

Title

SESSION LOCK

Description

Prevents further access to the system by initiating a session lock after [Assignment: organization-defined time period] of inactivity or upon receiving a request from a user; and

Reference Item Details

Category: ACCESS CONTROL

Family: ACCESS CONTROL

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.8.9 Ensure GNOME Screensaver period of inactivity is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.10 Ensure screensaver lock-enabled is setUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.11 Ensure overriding the screensaver lock-delay setting is preventedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.12 Ensure session idle-delay settings is enforcedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.13 Ensure GNOME Idle activation is setUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.14 Ensure the screensaver idle-activation-enabled settingUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.15 Ensure GNOME Lock Delay is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
2.2.2.3 Ensure GNOME Screensaver period of inactivity is configured.UnixCIS Amazon Linux 2 STIG v1.0.0 L3
2.2.2.5 Ensure GNOME Lock Delay is configuredUnixCIS Amazon Linux 2 STIG v1.0.0 L3
2.2.2.8 Ensure overriding the screensaver lock-delay setting is preventedUnixCIS Amazon Linux 2 STIG v1.0.0 L3
2.2.2.9 Ensure session idle-delay settings is enforcedUnixCIS Amazon Linux 2 STIG v1.0.0 L3
2.2.2.10 Ensure screensaver lock-enabled is set.UnixCIS Amazon Linux 2 STIG v1.0.0 L3
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - top right cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.3 Familiarize users with screen lock tools or corner to Start Screen SaverUnixCIS Apple macOS 10.13 L1 v1.1.0
2.3.3 Set a screen corner to Start Screen SaverUnixCIS Apple macOS 10.12 L1 v1.2.0
2.3.4 Set a screen corner to Start Screen SaverUnixCIS Apple OSX 10.9 L1 v1.3.0
2.3.4 Set a screen corner to Start Screen SaverUnixCIS Apple OSX 10.11 El Capitan L1 v1.1.0
2.3.4 Set a screen corner to Start Screen SaverUnixCIS Apple OSX 10.10 Yosemite L1 v1.2.0
2.8 Set 'Password protect the screen saver' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
2.9 Set 'Enable screen saver' to 'Enabled'WindowsCIS Windows 8 L1 v1.0.0
2.10 Set 'Seconds' to 'Enabled:900 or fewer seconds'WindowsCIS Windows 8 L1 v1.0.0
2.11 Set 'Screen saver executable name' to 'Enabled:scrnsave.scr'WindowsCIS Windows 8 L1 v1.0.0
5.006 - The system configuration is not set with a password-protected screen saver. - ScreenSaveActiveWindowsDISA Windows Vista STIG v6r41
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
19.1.3.2 Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.2 Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
19.1.3.3 Ensure 'Password protect the screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.3 Ensure 'Password protect the screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
19.1.3.4 Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.4 Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0