STIGQter: STIG Summary: Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Ubuntu operating system must be configured for users to directly initiate a session lock for all connection types.

DISA Rule

SV-219304r610963_rule

Vulnerability Number

V-219304

Group Title

SRG-OS-000030-GPOS-00011

Rule Version

UBTU-18-010403

Severity

CAT II

CCI(s)

• CCI-000058 - The information system provides the capability for users to directly initiate session lock mechanisms.
• CCI-000060 - The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image.

Weight

10

Fix Recommendation

Install the "vlock" (if it is not already installed) package by running the following command:

# sudo apt-get install vlock

Check Contents

Verify the Ubuntu operating system has the 'vlock' package installed, by running the following command:

# dpkg -l | grep vlock

If "vlock" is not installed, this is a finding.

Vulnerability Number

V-219304

Documentable

False

Rule Version

UBTU-18-010403

Severity Override Guidance

Verify the Ubuntu operating system has the 'vlock' package installed, by running the following command:

# dpkg -l | grep vlock

If "vlock" is not installed, this is a finding.

Check Content Reference

M

Target Key

4055

Comments