SV-261363r996536_rule
V-261363
SRG-OS-000029-GPOS-00010
SLEM-05-412015
CAT II
10
Configure SLEM 5 to initiate a session lock after a 15-minute period of inactivity.
Create or edit the "/etc/profile.d/autologout.sh" file and add or modify the following lines:
TMOUT=900
readonly TMOUT
export TMOUT
Set the proper permissions for the "/etc/profile.d/autologout.sh" file with the following command:
> sudo chmod +x /etc/profile.d/autologout.sh
Verify SLEM 5 must initiate a session logout after a 15-minute period of inactivity for all connection type with the following command:
> cat /etc/profile.d/autologout.sh
TMOUT=900
readonly TMOUT
export TMOUT
If the file "/etc/profile.d/autologout.sh" does not exist or the output from the function call is not exactly the same, this is a finding.
V-261363
False
SLEM-05-412015
Verify SLEM 5 must initiate a session logout after a 15-minute period of inactivity for all connection type with the following command:
> cat /etc/profile.d/autologout.sh
TMOUT=900
readonly TMOUT
export TMOUT
If the file "/etc/profile.d/autologout.sh" does not exist or the output from the function call is not exactly the same, this is a finding.
M
5596