Ensure default user shell timout is setID: oval:org.secpod.oval:def:70726 | Date: (C)2021-04-20 (M)2023-12-20 |
Class: COMPLIANCE | Family: unix |
The default TMOUT determines the shell timeout for users. The TMOUT value is measured in seconds.
Rationale:
Having no timeout value associated with a shell could allow an unauthorized user access to another user's shell session (e.g. user walks away from their computer and doesn't lock the screen). Setting a timeout value at least reduces the risk of this happening.