controls:
    -   id: SRG-OS-000163-GPOS-00072
        levels:
            - medium
        title: '{{{ full_name }}} must terminate all network connections associated with
            a communications session at the end of the session, or as follows: for in-band
            management sessions (privileged sessions), the session must be terminated after
            10 minutes of inactivity; and for user sessions (non-privileged session), the
            session must be terminated after 15 minutes of inactivity, except to fulfill
            documented and validated mission requirements.'
        rules:
            - sshd_set_idle_timeout
            - sshd_set_keepalive
            - accounts_tmout
            - logind_session_timeout
            - var_accounts_tmout=15_min
            - var_sshd_set_keepalive=1
        status: automated
