Sun Ray Server administrator session default timeout is used.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-16075	SUN0090	SV-17062r1_rule	ECSC-1	Medium

Description
Administrator sessions to the Sun Ray Server are critical to the availability and integrity of the system. The default timeout for these sessions is 30 minutes of inactivity. This session timeout is longer than the 10 minutes required by the Operating System and Network STIGs. Therefore, all administrator sessions will be configured to 10 minutes of inactivity to ensure unauthorized users do not gain access to the system configuration.

Description

Administrator sessions to the Sun Ray Server are critical to the availability and integrity of the system. The default timeout for these sessions is 30 minutes of inactivity. This session timeout is longer than the 10 minutes required by the Operating System and Network STIGs. Therefore, all administrator sessions will be configured to 10 minutes of inactivity to ensure unauthorized users do not gain access to the system configuration.

STIG	Date
Sun Ray 4 STIG	2015-04-02

Details

Check Text ( C-17119r1_chk )
On the Sun Ray server perform the following: # cat /etc/opt/SUNWut/webamin/webadmin.conf \| grep session.timeout # The session timeout (specified in minutes) Session.timeout=10 If the “session.timeout” value does not equal 10 minutes or less, this is a finding.

Fix Text (F-16181r1_fix)
Configure the administrator session timeout value to 10 minutes or less.