add new control RHEL-08-020360

Author: vojtapolasek

products/rhel8/controls/stig_rhel8.yml

@@ -1419,6 +1419,16 @@ controls:
           - accounts_umask_etc_profile
       status: automated
 
+    - id: RHEL-08-020353
+      levels:
+          - medium
+      title: RHEL 8 must automatically exit interactive command shell user sessions after 10 minutes of inactivity.
+      rules:
+          - accounts_tmout
+          - var_accounts_tmout=10_min
+      status: automated
+
+
     - id: RHEL-08-030000
       levels:
           - medium

tests/data/profile_stability/rhel8/stig.profile

@@ -35,10 +35,8 @@ accounts_passwords_pam_faillock_dir
 accounts_passwords_pam_faillock_interval
 accounts_passwords_pam_faillock_silent
 accounts_passwords_pam_faillock_unlock_time
-accounts_umask_etc_bashrc
-accounts_umask_etc_csh_cshrc
+accounts_tmout
 accounts_umask_etc_login_defs
-accounts_umask_etc_profile
 accounts_umask_interactive_users
 accounts_user_dot_no_world_writable_programs
 accounts_user_home_paths_only
@@ -403,6 +401,7 @@ var_accounts_minimum_age_login_defs=1
 var_accounts_passwords_pam_faillock_deny=3
 var_accounts_passwords_pam_faillock_fail_interval=900
 var_accounts_passwords_pam_faillock_unlock_time=never
+var_accounts_tmout=10_min
 var_accounts_user_umask=077
 var_audit_backlog_limit=8192
 var_auditd_action_mail_acct=root

tests/data/profile_stability/rhel8/stig_gui.profile

@@ -35,10 +35,8 @@ accounts_passwords_pam_faillock_dir
 accounts_passwords_pam_faillock_interval
 accounts_passwords_pam_faillock_silent
 accounts_passwords_pam_faillock_unlock_time
-accounts_umask_etc_bashrc
-accounts_umask_etc_csh_cshrc
+accounts_tmout
 accounts_umask_etc_login_defs
-accounts_umask_etc_profile
 accounts_umask_interactive_users
 accounts_user_dot_no_world_writable_programs
 accounts_user_home_paths_only
@@ -401,6 +399,7 @@ var_accounts_minimum_age_login_defs=1
 var_accounts_passwords_pam_faillock_deny=3
 var_accounts_passwords_pam_faillock_fail_interval=900
 var_accounts_passwords_pam_faillock_unlock_time=never
+var_accounts_tmout=10_min
 var_accounts_user_umask=077
 var_audit_backlog_limit=8192
 var_auditd_action_mail_acct=root