STIGQter: STIG Summary: Canonical Ubuntu 24.04 LTS Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Jul 2026:

Ubuntu 24.04 LTS must automatically terminate a user session after inactivity timeouts have expired.

DISA Rule

SV-270680r1066529_rule

Vulnerability Number

V-270680

Group Title

SRG-OS-000279-GPOS-00109

Rule Version

UBTU-24-200060

Severity

CAT II

CCI(s)

• CCI-002361 - Automatically terminate a user session after organization-defined conditions or trigger events requiring session disconnect.

Weight

10

Fix Recommendation

Configure Ubuntu 24.04 LTS to automatically terminate a user session after inactivity timeouts have expired or at shutdown.

Create the file "/etc/profile.d/99-terminal_tmout.sh" file if it does not exist.

Modify or append the following line in the "/etc/profile.d/99-terminal_tmout.sh " file:

TMOUT=600

This will set a timeout value of 10 minutes for all future sessions.

To set the timeout for the current sessions, execute the following command over the terminal session:

$ export TMOUT=600

Check Contents

Verify Ubuntu 24.04 LTS automatically terminates a user session after inactivity timeouts have expired with the following command:

$ sudo grep -E "\bTMOUT=[0-9]+" /etc/bash.bashrc /etc/profile.d/*
/etc/profile.d/99-terminal_tmout.sh:TMOUT=600

If "TMOUT" is not set, or if the value is "0" or is commented out, this is a finding.

Vulnerability Number

V-270680

Documentable

False

Rule Version

UBTU-24-200060

Severity Override Guidance

Verify Ubuntu 24.04 LTS automatically terminates a user session after inactivity timeouts have expired with the following command:

$ sudo grep -E "\bTMOUT=[0-9]+" /etc/bash.bashrc /etc/profile.d/*
/etc/profile.d/99-terminal_tmout.sh:TMOUT=600

If "TMOUT" is not set, or if the value is "0" or is commented out, this is a finding.

Check Content Reference

M

Target Key

5673