mediumsystemunverifiedrollback-safe

Enable graphical session lock until user re-establishes access

gdm-session-lock · RHEL ≥ 8 · 1 impl

Description

RHEL 8 must enable a user session lock until the user re-establishes access using established identification and authentication procedures for graphical user sessions.

Rationale

A session lock is a temporary action taken to prevent access after a period of inactivity. Enabling the session lock ensures that a locked session can only be unlocked with proper authentication.

Check → Remediate

Checkcommand

if ! rpm -q gdm >/dev/null 2>&1; then exit 0; fi
val=$(gsettings get org.gnome.desktop.screensaver lock-enabled 2>/dev/null)
[ "$val" = "true" ]

expected_exit:: 0

Remediatedconf_set

schema:: org/gnome/desktop/screensaver
key:: lock-enabled
value:: true
file:: 00-screensaver

Framework references

STIG

V-258021 / RHEL-09-271055V-230347

NIST 800-53

AC-11CM-6

#gdm#graphical#session-lock#authentication#stig