Skip to content

Ubuntu 22.04 LTS must initiate a graphical session lock after 15 minutes of inactivity.

An XCCDF Rule

Description

<VulnDiscussion>A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary nature of the absence. The session lock is implemented at the point where session activity can be determined. Regardless of where the session lock is determined and implemented, once invoked, a session lock of Ubuntu 22.04 LTS must remain in place until the user reauthenticates. No other activity aside from reauthentication must unlock the system.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID
SV-260538r958402_rule
Severity
Medium
References
Updated



Remediation - Manual Procedure

Configure Ubuntu 22.04 LTS to lock the current graphical user interface session after 15 minutes of inactivity.   
  
Set the following settings to allow graphical user interface session lock to initiate after 15 minutes of inactivity:   
  
     $ gsettings set org.gnome.desktop.screensaver lock-enabled true