STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must allow users to directly initiate a session lock for all connection types.

DISA Rule

SV-270674r1067167_rule

Vulnerability Number

V-270674

Group Title

SRG-OS-000031-GPOS-00012

Rule Version

UBTU-24-101000

Severity

CAT II

CCI(s)

• CCI-000060 - Conceal, via the device lock, information previously visible on the display with a publicly viewable image.
• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Install the "vlock" package (if it is not already installed) by running the following command:

$ sudo apt install -y vlock

Check Contents

Verify Ubuntu 24.04 LTS has the "vlock" package installed with the following command:

$ dpkg -l | grep vlock
ii vlock 2.2.2-10 amd64 Virtual Console locking program

If "vlock" is not installed, this is a finding.

Vulnerability Number

V-270674

Documentable

False

Rule Version

UBTU-24-101000

Severity Override Guidance

Verify Ubuntu 24.04 LTS has the "vlock" package installed with the following command:

$ dpkg -l | grep vlock
ii vlock 2.2.2-10 amd64 Virtual Console locking program

If "vlock" is not installed, this is a finding.

Check Content Reference

M

Target Key

5673