STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 must use vlock to allow for session locking.

DISA Rule

SV-261276r996316_rule

Vulnerability Number

V-261276

Group Title

SRG-OS-000028-GPOS-00009

Rule Version

SLEM-05-215010

Severity

CAT II

CCI(s)

• CCI-000056 - Retain the device lock until the user reestablishes access using established identification and authentication procedures.
• CCI-000060 - Conceal, via the device lock, information previously visible on the display with a publicly viewable image.

Weight

10

Fix Recommendation

Allow users to lock the console by installing the "kbd" package using zypper:

> sudo transactional-update pkg install kbd

> sudo reboot

Check Contents

Check that SLEM 5 has the "vlock" package installed with the following command:

> zypper search --installed-only --match-exact --provides vlock
i | kbd | Keyboard and Font Utilities | package

If the command outputs "no matching items found", this is a finding.

Vulnerability Number

V-261276

Documentable

False

Rule Version

SLEM-05-215010

Severity Override Guidance

Check that SLEM 5 has the "vlock" package installed with the following command:

> zypper search --installed-only --match-exact --provides vlock
i | kbd | Keyboard and Font Utilities | package

If the command outputs "no matching items found", this is a finding.

Check Content Reference

M

Target Key

5596