STIGQter: STIG Summary: Red Hat Enterprise Linux 8 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 23 Apr 2021:

RHEL 8 must prevent users from disabling session control mechanisms.

DISA Rule

SV-230350r627750_rule

Vulnerability Number

V-230350

Group Title

SRG-OS-000028-GPOS-00009

Rule Version

RHEL-08-020042

Severity

CAT III

CCI(s)

• CCI-000056 - The information system retains the session lock until the user reestablishes access using established identification and authentication procedures.

Weight

10

Fix Recommendation

Configure the operating system to prevent users from disabling the tmux terminal multiplexer by editing the "/etc/shells" configuration file to remove any instances of tmux.

Check Contents

Verify the operating system prevents users from disabling the tmux terminal multiplexer with the following command:

$ sudo grep -i tmux /etc/shells

If any output is produced, this is a finding.

Vulnerability Number

V-230350

Documentable

False

Rule Version

RHEL-08-020042

Severity Override Guidance

Verify the operating system prevents users from disabling the tmux terminal multiplexer with the following command:

$ sudo grep -i tmux /etc/shells

If any output is produced, this is a finding.

Check Content Reference

M

Target Key

2921

Comments