Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-48045 | SOL-11.1-040170 | SV-60917r4_rule | Medium |
Description |
---|
Allowing access to a graphical environment when the user is not attending the system can allow unauthorized users access to the system. |
STIG | Date |
---|---|
Solaris 11 SPARC Security Technical Implementation Guide | 2017-04-28 |
Check Text ( None ) |
---|
None |
Fix Text (F-51657r3_fix) |
---|
The root role is required. Edit the global screensaver configuration file to ensure 15 minute screen lock. # pfedit /usr/share/X11/app-defaults/XScreenSaver Find the timeout control lines and change them to read: *timeout: 0:15:00 *lockTimeout: 0:00:05 *lock: True For each user on the system, edit their local $HOME/.xscreensaver file and change the timeout values. # pfedit $HOME/.xscreensaver Find the timeout control lines and change them to read: timeout: 0:15:00 lockTimeout: 0:00:05 lock: True |