The operating system must invalidate session identifiers upon user logout or other session termination.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-29004 | SRG-OS-NA | SV-36995r1_rule | Medium |
| Description |
|---|
| This requirement focuses on communications protection at the application session, versus network packet level and is not applicable for operating systems. |
| STIG | Date |
|---|---|
| Operating System Security Requirements Guide | 2013-03-28 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (None) |
|---|
| None |