← Back to Solaris 11 x86 Security Technical Implementation Guide

V-216162

CAT II (Medium)

The operating system must terminate all sessions and network connections when non-local maintenance is completed.

Rule ID

SV-216162r603268_rule

STIG

Solaris 11 x86 Security Technical Implementation Guide

Version

V2R10

CCIs

V-48195

Discussion

Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network (e.g., the Internet) or an internal network. The operating system needs to ensure all sessions and network connections are terminated when non-local maintenance is completed.

Check Content

Determine if SSH is configured to disconnect sessions after 10 minutes of inactivity.

# grep ClientAlive /etc/ssh/sshd_config

If the output of this command is not:

ClientAliveInterval 600
ClientAliveCountMax 0

this is a finding.

Fix Text

The root role is required.

Configure the system to disconnect SSH sessions after 10 minutes of inactivity.

# pfedit /etc/ssh/sshd_config

Insert the two lines:

ClientAliveInterval 600
ClientAliveCountMax 0

Restart the SSH service with the new configuration.

# svcadm restart svc:/network/ssh