Check: RHEL-09-412010
RHEL 9 STIG:
RHEL-09-412010
(in versions v1 r3 through v1 r1)
Title
RHEL 9 must have the tmux package installed. (Cat II impact)
Discussion
Tmux is a terminal multiplexer that enables a number of terminals to be created, accessed, and controlled from a single screen. Red Hat endorses tmux as the recommended session controlling package. Satisfies: SRG-OS-000030-GPOS-00011, SRG-OS-000028-GPOS-00009
Check Content
Verify that RHEL 9 has the tmux package installed with the following command: $ sudo dnf list --installed tmux Example output: tmux.x86_64 3.2a-4.el9 If the "tmux" package is not installed, this is a finding.
Fix Text
The tmux package can be installed with the following command: $ sudo dnf install tmux
Additional Identifiers
Rule ID: SV-258063r926176_rule
Vulnerability ID: V-258063
Group Title: SRG-OS-000030-GPOS-00011
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000056 |
The information system retains the session lock until the user reestablishes access using established identification and authentication procedures. |
CCI-000058 |
The information system provides the capability for users to directly initiate session lock mechanisms. |
Controls
Number | Title |
---|---|
AC-11 |
Session Lock |