STIG: how to avoid systemd from killing all processes running in an inactive session

Solution Verified - Updated -

Issue

STIG requires setting a specific value for StopIdleSessionSec in /etc/systemd/logind.conf configuration file, usually 300s. With this setting, even when having KillUserProcesses=no in the configuration file, all processes started by a user during a session get killed when inactivity timeout is reached.

Environment

  • Red Hat Enterprise Linux 8 and 9
    • systemd-logind

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content