Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The system must allow locking of graphical desktop sessions.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The system must allow locking of graphical desktop sessions.

Description

Discussion Text

The ability to lock graphical desktop sessions manually allows users to easily secure their accounts should they need to depart from their workstations temporarily.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-209057

Rule

SV-209057r793778_rule

Severity

low

Rule Version

OL6-00-000508

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the GConf2 package is not installed, this is not applicable.

Verify the keybindings for the Gnome screensaver:

# gconftool-2 --direct --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory --get /apps/gnome_settings_daemon/keybindings/screensaver

If no output is visible, this is a finding.

Implementation Procedure

Fix Text

Run the following command to set the Gnome desktop keybinding for locking the screen:

# gconftool-2
--direct \
--config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
--type string \
--set /apps/gnome_settings_daemon/keybindings/screensaver "<Control><Alt>l"

Another keyboard sequence may be substituted for "<Control><Alt>l", which is the default for the Gnome desktop.

STIG check 190 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-209056The operating system, upon successful logon, must display to the user the date and time of the last logon or access via ssh.Next · V-209058 →The audit system must take appropriate action when the audit storage volume is full.