UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must allow locking of graphical desktop sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-50607 OL6-00-000508 SV-64813r2_rule Low
Description
The ability to lock graphical desktop sessions manually allows users to easily secure their accounts should they need to depart from their workstations temporarily.
STIG Date
Oracle Linux 6 Security Technical Implementation Guide 2018-03-01

Details

Check Text ( C-53119r2_chk )
If the GConf2 package is not installed, this is not applicable.

Verify the keybindings for the Gnome screensaver:

# gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gnome_settings_daemon/keybindings/screensaver

If no output is visible, this is a finding.
Fix Text (F-55403r1_fix)
Run the following command to set the Gnome desktop keybinding for locking the screen:

# gconftool-2
--direct \
--config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
--type string \
--set /apps/gnome_settings_daemon/keybindings/screensaver "l"

Another keyboard sequence may be substituted for "l", which is the default for the Gnome desktop.