Detections
Analytics

800-53|AC-11a.

Title

SESSION LOCK

Description

Prevents further access to the system by initiating a session lock after [Assignment: organization-defined time period] of inactivity or upon receiving a request from a user; and

Reference Item Details

Category: ACCESS CONTROL

Family: ACCESS CONTROL

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.8.9 Ensure GNOME Screensaver period of inactivity is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.10 Ensure screensaver lock-enabled is setUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.11 Ensure overriding the screensaver lock-delay setting is preventedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.12 Ensure session idle-delay settings is enforcedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.13 Ensure GNOME Idle activation is setUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.14 Ensure the screensaver idle-activation-enabled settingUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.8.15 Ensure GNOME Lock Delay is configuredUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.31 UBTU-24-101000UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.35 UBTU-24-200020UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.70 UBTU-22-271025UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.83 UBTU-22-412025UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.155 OL08-00-020030UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.156 OL08-00-020031UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.159 OL08-00-020043UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.160 OL08-00-020050UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.161 OL08-00-020060UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.162 OL08-00-020080UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.163 OL08-00-020081UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.164 OL08-00-020082UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.244 RHEL-09-271045UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.245 RHEL-09-271050UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.246 RHEL-09-271055UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.247 RHEL-09-271060UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.248 RHEL-09-271065UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.249 RHEL-09-271070UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.250 RHEL-09-271075UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.251 RHEL-09-271080UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.288 RHEL-09-412035UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - bottom left cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple macOS 10.12 L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.9 L2 v1.3.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.10 Yosemite L2 v1.2.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.3.2 Secure screen saver corners - bottom right cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple macOS 10.13 L2 v1.1.0
2.3.2 Secure screen saver corners - top left cornerUnixCIS Apple OSX 10.11 El Capitan L2 v1.1.0
2.10 Set 'Seconds' to 'Enabled:900 or fewer seconds'WindowsCIS Windows 8 L1 v1.0.0
2.11 Set 'Screen saver executable name' to 'Enabled:scrnsave.scr'WindowsCIS Windows 8 L1 v1.0.0
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
19.1.3.1 Ensure 'Enable screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.2 Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.2 Ensure 'Force specific screen saver: Screen saver executable name' is set to 'Enabled: scrnsave.scr'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
19.1.3.3 Ensure 'Password protect the screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.3 Ensure 'Password protect the screen saver' is set to 'Enabled'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
19.1.3.4 Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
19.1.3.4 Ensure 'Screen saver timeout' is set to 'Enabled: 900 seconds or fewer, but not 0'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0