Ubuntu 22.04 LTS must automatically exit interactive command shell user sessions after 15 minutes of inactivity.

An XCCDF Rule

Description

<VulnDiscussion>Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-260554r958636_rule
Severity: Medium
References: CCI-002361
Updated: 17 days ago

Configure Ubuntu 22.04 LTS to exit interactive command shell user sessions after 15 minutes of inactivity. 
 
Create and/or append a custom file under "/etc/profile.d/" by using the following command: 
 
     $ sudo su -c "echo TMOUT=900 >> /etc/profile.d/99-terminal_tmout.sh" 
  This will set a timeout value of 15 minutes for all future sessions.  
  
To set the timeout for the current sessions, execute the following command over the terminal session:  
  
     $ export TMOUT=900

Ubuntu 22.04 LTS must automatically exit interactive command shell user sessions after 15 minutes of inactivity.

Description

Remediation - Manual Procedure