{"description": "To enable console screen locking, install the <tt>screen</tt> package.\nThe <code>screen</code> package can be installed with the following command:\n<pre>\n$ apt-get install screen</pre>\nInstruct users to begin new terminal sessions with the following command:\n<pre>$ screen</pre>\nThe console can now be locked with the following key combination:\n<pre>ctrl+a x</pre>", "rationale": "A session time-out lock is a temporary action taken when a user stops work and moves away from the immediate\nphysical vicinity of the information system but does not logout because of the temporary nature of the absence.\nRather than relying on the user to manually lock their operation system session prior to vacating the vicinity,\noperating systems need to be able to identify when a user's session has idled and take action to initiate the\nsession lock.\n<br /><br />\nThe <tt>screen</tt> package allows for a session lock to be implemented and configured.", "severity": "medium", "references": {"cis-csc": ["1", "12", "15", "16"], "cobit5": ["DSS05.04", "DSS05.10", "DSS06.10"], "cui": ["3.1.10"], "isa-62443-2009": ["4.3.3.6.1", "4.3.3.6.2", "4.3.3.6.3", "4.3.3.6.4", "4.3.3.6.5", "4.3.3.6.6", "4.3.3.6.7", "4.3.3.6.8", "4.3.3.6.9"], "isa-62443-2013": ["SR 1.1", "SR 1.10", "SR 1.2", "SR 1.5", "SR 1.7", "SR 1.8", "SR 1.9"], "iso27001-2013": ["A.18.1.4", "A.9.2.1", "A.9.2.4", "A.9.3.1", "A.9.4.2", "A.9.4.3"], "nist": ["CM-6(a)"], "nist-csf": ["PR.AC-7"], "ospp": ["FMT_MOF_EXT.1"], "srg": ["SRG-OS-000029-GPOS-00010"]}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "the package is not installed", "ocil": " Run the following command to determine if the <code>screen</code> package is installed: <pre>$ dpkg -l  screen</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": [], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "Install the screen Package", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/package_screen_installed/rule.yml", "template": {"name": "package_installed", "vars": {"pkgname": "screen"}, "backends": {}}}