STIGQter: STIG Summary: SUSE Linux Enterprise Server 15 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 23 Apr 2021:

The SUSE operating system must be able to lock the graphical user interface (GUI).

DISA Rule

SV-234810r622137_rule

Vulnerability Number

V-234810

Group Title

SRG-OS-000028-GPOS-00009

Rule Version

SLES-15-010100

Severity

CAT II

CCI(s)

• CCI-000058 - The information system provides the capability for users to directly initiate session lock mechanisms.
• CCI-000060 - The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image.
• CCI-000056 - The information system retains the session lock until the user reestablishes access using established identification and authentication procedures.

Weight

10

Fix Recommendation

Note: If the system does not have a graphical user interface installed, this requirement is Not Applicable. This command must be run from an X11 session; otherwise, the command will not work correctly.

Configure the SUSE operating system to allow the user to lock the GUI.

Run the following command to configure the SUSE operating system to allow the user to lock the GUI:

> sudo gsettings set org.gnome.desktop.lockdown disable-lock-screen false

Check Contents

Verify the SUSE operating system allows the user to lock the GUI.

Note: If the system does not have a graphical user interface installed, this requirement is Not Applicable.

Run the following command:

> sudo gsettings get org.gnome.desktop.lockdown disable-lock-screen

If the result is "true", this is a finding.

Vulnerability Number

V-234810

Documentable

False

Rule Version

SLES-15-010100

Severity Override Guidance

Verify the SUSE operating system allows the user to lock the GUI.

Note: If the system does not have a graphical user interface installed, this requirement is Not Applicable.

Run the following command:

> sudo gsettings get org.gnome.desktop.lockdown disable-lock-screen

If the result is "true", this is a finding.

Check Content Reference

M

Target Key

5274

Comments