8.1.8 Session idle time out
8.1.8 session time outDepending on the application used, appropriate measures should be taken to avoid sessions being idle and unsupervised by the owner of the session. Regarding this control the PCI DSS states such sessions should be lower than 15 minutes. They may related to applications running on the system itself, but also those used for system management. In the case of Linux this would to the configuration of SSH.
Define the timeout value in your shell, with the TMOUT variable.
- File: /etc/ssh/sshd_config
- Option: ClientAliveInterval 300
- Option: ClientAliveCountMax 3