STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must automatically lock graphical user sessions after 10 minutes of inactivity.

DISA Rule

SV-281278r1208799_rule

Vulnerability Number

V-281278

Group Title

SRG-OS-000029-GPOS-00010

Rule Version

RHEL-10-700750

Severity

CAT II

CCI(s)

CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.
CCI-000060 - Conceal, via the device lock, information previously visible on the display with a publicly viewable image.

Weight

Fix Recommendation

Configure RHEL 10 to initiate a screensaver after a 10-minute period of inactivity for graphical user interfaces.

Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.

Update the "/etc/dconf/db/local.d/00-screensaver" file to prevent nonprivileged users from modifying the screensaver idle-delay setting:

$ sudo vi /etc/dconf/db/local.d/00-screensaver

[org/gnome/desktop/session]
# Set the lock time out to 900 seconds before the session is considered idle
idle-delay=uint32 600

Update the system databases:

$ sudo dconf update

Check Contents

Note: This requirement assumes the use of the RHEL 10 default graphical user interface, the GNOME desktop environment. If the system does not have any graphical user interface installed, this requirement is not applicable.

Verify RHEL 10 initiates a session lock after a 10-minute period of inactivity for graphical user interfaces with the following command:

$ sudo gsettings get org.gnome.desktop.session idle-delay
uint32 600

If "idle-delay" is set to "0" or a value greater than "600", this is a finding.

Vulnerability Number

V-281278

Documentable

False

Rule Version

RHEL-10-700750

Severity Override Guidance

Check Content Reference

Target Key

5733