[CCE-28308-5] inactivity_logout

[macosforgebot]

@DewSecGitHub originally submitted this as ticket:8

• Version: Beta
• Keywords: Settings, Review

---

CCE#: CCE-28308-5
Setting Name: inactivity_logout
Description:
Controls whether inactivity logs out a user and, if so, how many minutes are required to trigger logout.

Parameters: N / A
Technical Mechanism: In .GlobalPreferences.plist, delete the AutoLogoutDelay key to disable inactivity logout.

Reference: OSX 10.5 DoD Recommended Settings Document, 10.6 DISA STIG, CIS Security Configuration benchmark for 10.6.

Function: Authentication

Rationale: N / A

---

SOHO: disable inactivity logouts
Enterprise: disable inactivity logouts
SSLF: disable inactivity logouts

---

Additional Mechanism: N / A

---

OVAL Content: N / A

---

Comment:

[macosforgebot]

@DewSecGitHub originally submitted this as comment:1:⁠ticket:8

• Status changed from new to accepted

[macosforgebot]

plink53@… originally submitted this as comment:2:⁠ticket:8

---

NIST SP800-53 rev 4 AC-2 CE-5 for high systems requires inactivity log out.
CNSS!-1253 AC-2 CE-5 differs this setting to each site.

Typically, high systems will be at the top secret (DOE) level and these settings might not ever apply to these systems but the ability to set them should be included somewhere.

[macosforgebot]

blank@… originally submitted this as comment:3:⁠ticket:8

• Status changed from accepted to closed
• Resolution set to R8 - Completed