Files
ansible-hardening/doc/metadata/rhel7/RHEL-07-010074.rst
Major Hayden 770b2ad86e [Docs] Set graphical session locks
This patch adds documentation for:

  https://review.openstack.org/396410

Implements: blueprint security-rhel7-stig
Change-Id: I0d87bfa9c17a9ee3732c22f5a02cf2004025c8fd
2016-11-14 14:16:35 +00:00

21 lines
623 B
ReStructuredText

---
id: RHEL-07-010074
status: implemented
tag: graphical
---
The STIG requires that a graphical session is locked when the screensaver
starts. This requires a user to re-enter their credentials to regain access to
the system.
The tasks will set a timeout of 5 seconds after the screensaver has started
before the session is locked. This gives a user a few seconds to press a key or
wiggle their mouse after the screensaver appears without needing to re-enter
their credentials.
Deployers can adjust this timeout by setting an Ansible variable:
.. code-block:: yaml
security_lock_session_screensaver_lock_delay: 5