UCF STIG Viewer Logo

The system must allow locking of graphical desktop sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-209057 OL6-00-000508 SV-209057r793778_rule Low
Description
The ability to lock graphical desktop sessions manually allows users to easily secure their accounts should they need to depart from their workstations temporarily.
STIG Date
Oracle Linux 6 Security Technical Implementation Guide 2021-12-03

Details

Check Text ( C-9310r357956_chk )
If the GConf2 package is not installed, this is not applicable.

Verify the keybindings for the Gnome screensaver:

# gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gnome_settings_daemon/keybindings/screensaver

If no output is visible, this is a finding.
Fix Text (F-9310r357957_fix)
Run the following command to set the Gnome desktop keybinding for locking the screen:

# gconftool-2
--direct \
--config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
--type string \
--set /apps/gnome_settings_daemon/keybindings/screensaver "l"

Another keyboard sequence may be substituted for "l", which is the default for the Gnome desktop.