STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 01 Jul 2026:

The operating system must automatically terminate a user session after inactivity time-outs have expired.

DISA Rule

SV-258840r1003643_rule

Vulnerability Number

V-258840

Group Title

SRG-OS-000279-GPOS-00109

Rule Version

PHTN-40-000093

Severity

CAT II

CCI(s)

• CCI-002361 - Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

Weight

10

Fix Recommendation

Navigate to and open:

/etc/profile.d/tmout.sh

Set its content to the following:

TMOUT=900
readonly TMOUT
export TMOUT
mesg n 2>/dev/null

Check Contents

At the command line, run the following command:

# grep -E "TMOUT=900" /etc/bash.bashrc /etc/profile.d/*

Example result:

/etc/profile.d/tmout.sh:TMOUT=900

If the "TMOUT" environmental variable is not set, the value is more than "900", or is set to "0", this is a finding.

Vulnerability Number

V-258840

Documentable

False

Rule Version

PHTN-40-000093

Severity Override Guidance

At the command line, run the following command:

# grep -E "TMOUT=900" /etc/bash.bashrc /etc/profile.d/*

Example result:

/etc/profile.d/tmout.sh:TMOUT=900

If the "TMOUT" environmental variable is not set, the value is more than "900", or is set to "0", this is a finding.

Check Content Reference

M

Target Key

5569