STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must initiate a graphical session lock after 10 minutes of inactivity.

DISA Rule

SV-270678r1101791_rule

Vulnerability Number

V-270678

Group Title

SRG-OS-000029-GPOS-00010

Rule Version

UBTU-24-200020

Severity

CAT II

CCI(s)

CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

Fix Recommendation

Configure Ubuntu 24.04 LTS to lock the current graphical user interface session after 10 minutes of inactivity.

Create or edit a file named /etc/dconf/db/local.d/00-screensaver with the following contents:

[org/gnome/desktop/session]
idle-delay=uint32 900

[org/gnome/desktop/screensaver]
lock-enabled=true
lock-delay=uint32 600

Update the dconf settings:

$ sudo dconf update

Check Contents

Note: If Ubuntu 24.04 LTS does not have a graphical user interface installed, this requirement is not applicable.

Verify the Ubuntu operation system has a graphical user interface session lock configured to activate after 10 minutes of inactivity with the following commands:

Set the following settings to verify the graphical user interface session is configured to lock the graphical user session after 10 minutes of inactivity:

**$ gsettings get org.gnome.desktop.screensaver lock-enabled
true

$ gsettings get org.gnome.desktop.screensaver lock-delay
uint32 0

$ gsettings get org.gnome.desktop.session idle-delay
uint32 600

Note: If "lock-enabled" is not set to "true", this is a finding.

If "lock-delay" is set to a value greater than "0", or if "idle-delay" is set to a value greater than "600", or either settings are missing, this is a finding.

Vulnerability Number

V-270678

Documentable

False

Rule Version

UBTU-24-200020

Severity Override Guidance

Check Content Reference

Target Key

5673