STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

OL 8 must terminate idle user sessions.

DISA Rule

SV-257259r1156674_rule

Vulnerability Number

V-257259

Group Title

SRG-OS-000163-GPOS-00072

Rule Version

OL08-00-020035

Severity

CAT II

CCI(s)

• CCI-001133 - Terminate the network connection associated with a communications session at the end of the session or after an organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure OL 8 to log out idle sessions.

Create the directory if necessary:

$ mkdir -p /etc/systemd/logind.conf.d/

Create a *.conf file in /etc/systemd/logind.conf.d/ with the following content:

[Login]
StopIdleSessionSec=600
KillUserProcesses=no

Restart systemd-logind:

$ systemctl restart systemd-logind

Check Contents

Verify OL 8 logs out sessions that are idle for 10 minutes with the following command:

$ systemd-analyze cat-config systemd/logind.conf | grep StopIdleSessionSec

#StopIdleSessionSec=infinity
StopIdleSessionSec=600

If "StopIdleSessionSec" is not configured to "600" seconds, this is a finding.

Vulnerability Number

V-257259

Documentable

False

Rule Version

OL08-00-020035

Severity Override Guidance

Verify OL 8 logs out sessions that are idle for 10 minutes with the following command:

$ systemd-analyze cat-config systemd/logind.conf | grep StopIdleSessionSec

#StopIdleSessionSec=infinity
StopIdleSessionSec=600

If "StopIdleSessionSec" is not configured to "600" seconds, this is a finding.

Check Content Reference

M

Target Key

5416