Amazon Linux 2023 Security Technical Implementation Guide

The Amazon Linux 2023 Security Technical Implementation Guide (V1 R5) has 187 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

187STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R5

CurrentPublished Wed Sep 30 2026

Amazon Linux 2023 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.

Amazon Linux 2023 Security Technical Implementation Guide

Assessment Title

Rule Text

Amazon Linux 2023 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.

Description

Discussion Text

Terminating an idle interactive command shell user session within a short time period reduces the window of opportunity for unauthorized personnel to take control of it when left unattended in a virtual terminal or physical console.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-274142

Rule

SV-274142r1208254_rule

Severity

medium

Rule Version

AZLX-23-002396

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify Amazon Linux 2023 is configured to exit interactive command shell user sessions after 10 minutes of inactivity or less with the following command:

$ sudo grep -i tmout /etc/profile /etc/profile.d/*.sh
/etc/profile.d/tmout.sh:declare -xr TMOUT=600

If "TMOUT" is not set to "600" or less in a script located in the "/etc/'profile.d/ directory, is missing or is commented out, this is a finding.

Implementation Procedure

Fix Text

Configure Amazon Linux 2023 to exit interactive command shell user sessions after 10 minutes of inactivity.

Add or edit the following line in "/etc/profile.d/tmout.sh":

#!/bin/bash

declare -xr TMOUT=600

STIG check 139 of 187 in the Amazon Linux 2023 STIG checklist

← Previous · V-274141Amazon Linux 2023 must limit the number of concurrent sessions to ten for all accounts and/or account types.Next · V-274143 →Amazon Linux 2023 must enforce 24 hours/1 day as the minimum password lifetime.