Merge pull request #12086 from vojtapolasek/remove_logind_session_tim…

…eout_from_stig_gui remove logind_session_timeout from stig_gui profiles
ComplianceAsCode · Jul 2, 2024 · 6bdb083 · 6bdb083
2 parents 349ffa3 + 1ae9b39
commit 6bdb083
Show file tree

Hide file tree

Showing 5 changed files with 7 additions and 2 deletions.
diff --git a/products/rhel10/profiles/stig_gui.profile b/products/rhel10/profiles/stig_gui.profile
@@ -30,3 +30,5 @@ selections:
     # Limiting user namespaces cause issues with user apps, such as Firefox and Cheese
     # https://issues.redhat.com/browse/RHEL-10416
     - '!sysctl_user_max_user_namespaces'
+    # locking of idle sessions is handled by screensaver when GUI is present, the following rule is therefore redundant
+    - '!logind_session_timeout'
diff --git a/products/rhel8/profiles/stig_gui.profile b/products/rhel8/profiles/stig_gui.profile
@@ -46,3 +46,6 @@ selections:
     # Limiting user namespaces cause issues with user apps, such as Firefox and Cheese
     # https://issues.redhat.com/browse/RHEL-10416
     - '!sysctl_user_max_user_namespaces'
+
+    # locking of idle sessions is handled by screensaver when GUI is present, the following rule is therefore redundant
+    - '!logind_session_timeout'
diff --git a/products/rhel9/profiles/stig_gui.profile b/products/rhel9/profiles/stig_gui.profile
@@ -47,3 +47,5 @@ selections:
     # Limiting user namespaces cause issues with user apps, such as Firefox and Cheese
     # https://issues.redhat.com/browse/RHEL-10416
     - '!sysctl_user_max_user_namespaces'
+    # locking of idle sessions is handled by screensaver when GUI is present, the following rule is therefore redundant
+    - '!logind_session_timeout'
diff --git a/tests/data/profile_stability/rhel8/stig_gui.profile b/tests/data/profile_stability/rhel8/stig_gui.profile
@@ -225,7 +225,6 @@ selections:
 - accounts_password_all_shadowed_sha512
 - rsyslog_cron_logging
 - package_sendmail_removed
-- logind_session_timeout
 - configure_tmux_lock_after_time
 - accounts_password_set_min_life_existing
 - audit_rules_file_deletion_events_renameat

diff --git a/tests/data/profile_stability/rhel9/stig_gui.profile b/tests/data/profile_stability/rhel9/stig_gui.profile
@@ -348,7 +348,6 @@ selections:
 - kernel_module_tipc_disabled
 - kernel_module_usb-storage_disabled
 - libreswan_approved_tunnels
-- logind_session_timeout
 - mount_option_boot_efi_nosuid
 - mount_option_boot_nodev
 - mount_option_boot_nosuid