STIGQter: STIG Summary: Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Ubuntu 22.04 LTS must initiate a graphical session lock after 10 minutes of inactivity.

DISA Rule

SV-260538r1208695_rule

Vulnerability Number

V-260538

Group Title

SRG-OS-000029-GPOS-00010

Rule Version

UBTU-22-271025

Severity

CAT II

CCI(s)

CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

Fix Recommendation

Configure Ubuntu 22.04 LTS to lock the current graphical user interface session after 10 minutes of inactivity.

Create or edit a file named "/etc/dconf/db/local.d/00-screensaver" with the following contents:

[org/gnome/desktop/screensaver]
lock-enabled=true
lock-delay=0

[org/gnome/desktop/session]
idle-delay=600

Check Contents

Note: If no graphical user interface is installed, this requirement is not applicable.

Verify Ubuntu 22.04 LTS has a graphical user interface session lock configured to activate after 10 minutes of inactivity by using the following commands:

Get the following settings to verify the graphical user interface session is configured to lock the graphical user session after 10 minutes of inactivity:

$ gsettings get org.gnome.desktop.screensaver lock-enabled
true

$ gsettings get org.gnome.desktop.screensaver lock-delay
uint32 0

$ gsettings get org.gnome.desktop.session idle-delay
uint32 600

If "lock-enabled" is not set to "true", is commented out, or is missing, this is a finding.

If "lock-delay" is set to a value greater than "0", or if "idle-delay" is set to a value greater than "600", is commented out, or is missing, this is a finding.

Vulnerability Number

V-260538

Documentable

False

Rule Version

UBTU-22-271025

Severity Override Guidance

Check Content Reference

Target Key

5594