dtsession timeout variable setting

# cat /etc/dt/config/C/sys.resources | grep -i dtsession | grep -i lockTimeout
If the dtsession timeout is greater than 15, commented or does not exist, this is a finding.

Examine the Open Windows timeout settings, both global and for every user.

# cat /usr/openwin/lib/app-defaults/XScreenSaver | egrep -i ‘\*(lock|timeout):’
If the global Open Windows timeout is greater than 15 minutes, commented or does not exist, this is a finding. If the global lock setting is not true, this is a finding.

# cut -d: -f6 /etc/passwd | xargs -iX egrep -i ‘^(lock|timeout):’ X/.xscreensaver
If the Open Windows timeout is greater than 15 minutes for any user, this is a finding. If the lock setting is not true for any user, this is a finding.

Locate and add/uncomment/change the line to N=15.
dtsession*lockTimeout:
dtsession*lockTimeout: 15

Log out of CDE and log back in to verify that the timeout is in effect.

The timeout parameter in /usr/openwin/lib/app-defaults/XScreenSaver and all users’ .xscreensaver files should also be confirmed to be uncommented and set to 0:15:00.