{"description": "To set a key binding for the screen locking in <tt>tmux</tt> terminal multiplexer,\nthe <tt>session-lock</tt> command must be bound to a key.\nAdd the following line to <tt>/etc/tmux.conf</tt>:\n<pre>bind X lock-session</pre>.\nThe console can now be locked with the following key combination:\n<pre>Ctrl+b Shift+x</pre>", "rationale": "The <tt>tmux</tt> package allows for a session lock to be implemented and configured.\nHowever, the session lock is implemented by an external command. The <tt>tmux</tt>\ndefault configuration does not contain an effective session lock.", "severity": "low", "references": {"srg": ["SRG-OS-000028-GPOS-00009", "SRG-OS-000030-GPOS-00011"]}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "the \"lock-session\" is not bound to a specific key", "ocil": "Verify Ubuntu 22.04 enables the user to initiate a session lock through key bindings with the following commands:\n\n<pre>$ grep \"lock-session\" /etc/tmux.conf</pre>\n\n<pre>bind X lock-session</pre>\n\nThen, verify that the /etc/tmux.conf file can be read by other users than root:\n\n<pre>$ sudo ls -al /etc/tmux.conf</pre>", "oval_external_content": null, "fixtext": "Configure Ubuntu 22.04 to allow a user to lock a session through a key binding by adding the following line to the file \"/etc/tmux.conf\":\n\n<pre>bind X lock-session</pre>\n\nThen, ensure a correct mode of /etc/tmux.conf using this command:\n\n$ sudo chmod 0644 /etc/tmux.conf", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "package[tmux]", "platforms": ["package[tmux]"], "sce_metadata": {}, "inherited_platforms": ["system_with_kernel"], "cpe_platform_names": ["package_tmux"], "inherited_cpe_platform_names": ["system_with_kernel"], "bash_conditional": null, "fixes": {}, "title": "Configure the tmux lock session key binding", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/accounts/accounts-physical/screen_locking/console_screen_locking/configure_tmux_lock_keybinding/rule.yml", "template": null}