UCF STIG Viewer Logo

The Photon operating system must set an inactivity timeout value for non-interactive sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239125 PHTN-67-000054 SV-239125r675183_rule Medium
Description
A session timeout is an action taken when a session goes idle for any reason. Rather than relying on the user to manually disconnect their session prior to going idle, the Photon operating system must be able to identify when a session has idled and take action to terminate the session.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42336r675181_chk )
At the command line, execute the following command:

# grep TMOUT /etc/bash.bashrc

Expected result:

TMOUT=900
readonly TMOUT
export TMOUT

If the file does not exist or the output does not match the expected result, this is a finding.
Fix Text (F-42295r675182_fix)
Open /etc/bash.bashrc with a text editor and add the following to the end:

TMOUT=900
readonly TMOUT
export TMOUT