openstack/ansible-hardening
Code Issues Proposed changes
Files
770b2ad86e5e188ea2fd415ef7a6f8e418bb315a
ansible-hardening/doc/metadata/rhel7/RHEL-07-010074.rst
Major Hayden 770b2ad86e [Docs] Set graphical session locks 
This patch adds documentation for:

  https://review.openstack.org/396410

Implements: blueprint security-rhel7-stig
Change-Id: I0d87bfa9c17a9ee3732c22f5a02cf2004025c8fd
2016-11-14 14:16:35 +00:00

623 B
Raw Blame History

---id: RHEL-07-010074 status: implemented tag: graphical ---

The STIG requires that a graphical session is locked when the screensaver starts. This requires a user to re-enter their credentials to regain access to the system.

The tasks will set a timeout of 5 seconds after the screensaver has started before the session is locked. This gives a user a few seconds to press a key or wiggle their mouse after the screensaver appears without needing to re-enter their credentials.

Deployers can adjust this timeout by setting an Ansible variable:

security_lock_session_screensaver_lock_delay: 5