Skip to content

The system must require users to re-authenticate to unlock a graphical desktop environment.

An XCCDF Rule

Description

Allowing access to a graphical environment when the user is not attending the system can allow unauthorized users access to the system.

ID
SV-216101r958400_rule
Version
SOL-11.1-040170
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

The root role is required.

Edit the global screensaver configuration file to ensure 15 minute screen lock.

# pfedit /usr/share/X11/app-defaults/XScreenSaver