CA IDMS CV must supply logout functionality to allow the user to implicitly terminate a session initiated by the terminal user.
An XCCDF Rule
Description
<VulnDiscussion>If a user does not sign off a terminal after use, it can be used for illegitimate purposes. The IDMS RESOURCE TIMEOUT INTERVAL allows the organization to set a limit to the amount of time it can be left unattended.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-251632r961224_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Use TASK SYSGEN if online, or program RHDCSGEN if batch.
Sign on to the dictionary where the system definition is maintained: "SIGNON DICTIONARY SYSTEM.", for example.
Enter: "MODIFY SYSTEM 123 RESOURCE TIMEOUT INTERVAL is <the organization-defined timeout number of wall-clock seconds> ." where 123 is the number of the system being modified.