Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-119432

[RFE] Idle Text console (CLI) locking feature

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • rhel-9.6, rhel-10.0
    • systemd
    • None
    • None
    • rhel-systemd
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      Automatic text console locking functionality (Not GUI but CLI). Something similar to vlock

      What is the impact of this issue to you?

      Aiming to improve security posture of system

      Please provide the package NVR for which the bug is seen:

      How reproducible is this bug?:

      Always

      Steps to reproduce

      1. Initially we thought `IdleAction` in `systemd-logind` might help achive this but this option is only implemented for GUI and not for CLI.
      2. Also IdleAction triggers when all session on system are idle for certain amount and then system gets locked. We need per session locking here.
      3. Requirement here is to achieve CLI locking after being idle for certain seconds/minutes 
      4. This probably can be achieved via custom scripts and code but if we can consume the IDLE trigger generated by logind to achive this requirement that will be more integral solution.

      Expected results

      • CLI console getting autimatically locked after hitting IDLE time

      Actual results

      • TMOUT in bash only works with bash but not with other SHELLS and it doesnt locks but logs out
      • StopIdleSessionSec only logs out the CLI session
      • IdleAction is for systemwide action on system idle and not per session locking mechanism for GUI only not fro CLI
      • Tmux and screen have lock mechanism but again normal bash session will not have it.

      REFERENCE: https://issues.redhat.com/browse/RHEL-113453

       

              msekleta@redhat.com Michal Sekletar
              rhn-support-smahanga Shreyas Mahangade
              systemd maint mailing list systemd maint mailing list
              Frantisek Sumsal Frantisek Sumsal
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated: