controls:
- id: SRG-APP-000190-CTR-000500
  levels:
  - medium
  title: 'The application must terminate all network connections associated with a
    communications session at the end of the session, or as follows: for in-band management
    sessions (privileged sessions), the session must be terminated after 10 minutes
    of inactivity;'
  status: automated
  rules:
  - sshd_disable_root_login
  - oauth_or_oauthclient_inactivity_timeout
