STIGQter: STIG Summary: Canonical Ubuntu 18.04 LTS Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Ubuntu operating system must retain a users session lock until that user reestablishes access using established identification and authentication procedures.

DISA Rule

SV-219302r610963_rule

Vulnerability Number

V-219302

Group Title

SRG-OS-000028-GPOS-00009

Rule Version

UBTU-18-010401

Severity

CAT II

CCI(s)

• CCI-000056 - The information system retains the session lock until the user reestablishes access using established identification and authentication procedures.

Weight

10

Fix Recommendation

Configure the Ubuntu operating system so that it allows a user to lock the current graphical user interface session.

Note: If the Ubuntu operating system does not have a Graphical User Interface installed, this requirement is Not Applicable.

Set the ""lock-enabled"" setting to allow graphical user interface session locks with the following command:

# sudo gsettings set org.gnome.desktop.screensaver lock-enabled true

Check Contents

Verify the Ubuntu operation system has a graphical user interface session lock enabled.

Note: If the Ubuntu operating system does not have a Graphical User Interface installed, this requirement is Not Applicable.

Get the ""lock-enabled"" setting to verify if the graphical user interface session has the lock enabled with the following command:

# sudo gsettings get org.gnome.desktop.screensaver lock-enabled

true

If "lock-enabled" is not set to "true", this is a finding.

Vulnerability Number

V-219302

Documentable

False

Rule Version

UBTU-18-010401

Severity Override Guidance

Verify the Ubuntu operation system has a graphical user interface session lock enabled.

Note: If the Ubuntu operating system does not have a Graphical User Interface installed, this requirement is Not Applicable.

Get the ""lock-enabled"" setting to verify if the graphical user interface session has the lock enabled with the following command:

# sudo gsettings get org.gnome.desktop.screensaver lock-enabled

true

If "lock-enabled" is not set to "true", this is a finding.

Check Content Reference

M

Target Key

4055

Comments