ComplianceAsCode / ComplianceAsCode/content

Rule logind_session_timeout is misaligned with DISA

Open
#14,540 1 comment 0 reactions 0 assignees View on GitHub
blocked productization-issue RHEL9 STIG triaged
Dominant language
Shell
Stars
2.8k
Forks
828
Avg merge
3d 8m
Merged PRs (30d)
80

Description

#### Description of problem:
Rule logind_session_timeout is misaligned with DISA STIG for RHEL 9 V2R7. We discovered this issue in weekly productization.

The problem is that CaC check finds the setting in the directory `/etc/systemd/logind.conf.d` at `/etc/systemd/logind.conf.d/oscap-idle-sessions.conf` but DISA requires it to be present in the `/etc/systemd/logind.conf`.

#### SCAP Security Guide Version:
Current upstream master branch as of 2026-03-08 as of HEAD c4ab25f1cd64aee0533f63aca18f58bea6c180f2

#### Operating System Version:
RHEL-9.2.0-updates-20260306.0
RHEL-9.4.0-updates-20260306.1
RHEL-9.6.0-updates-20260306.0
RHEL-9.7.0-updates-20260306.0

#### Steps to Reproduce:

1. /scanning/disa-alignment/oscap
2. /scanning/disa-alignment/anaconda
3. /scanning/disa-alignment/ansible

#### Actual Results:
SSG result: pass, DISA result(s): SV-258077r1155659_rule:fail

#### Expected Results:
SSG result: pass, DISA result(s): SV-258077r1155659_rule:pass

#### Additional Information/Debugging Steps:
no

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.