The X server must have the correct options enabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1021 | GEN000000-LNX00360 | SV-37207r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Without the correct options enabled, the Xwindows system would be less secure and there would be no screen timeout. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2014-07-02 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-31154r1_fix) |
|---|
| Enable the following options: -audit (at level 4), -auth and -s with 15 minutes as the timeout value. Procedure for gdm: Edit /etc/gdm/custom.conf and add the following: [server-Standard] name=Standard server command=/usr/bin/Xorg -br -audit 4 -s 15 chooser=false handled=true flexible=true priority=0 Procedure for xinit: Edit or create a .xserverrc file in the users home directory containing the startup script for xinit. This script must have an exec line with at least these options: exec /usr/bin/X -audit 4 -s 15 -auth The |