Steve,

So, would tmux be a valid alternative? It can do the same as screen in that respect.

Also, either case is going to leave the base VT wide open and able to be connected to fairly easily.

Would using an Exit Trap with TMOUT to spawn vlock work? That should work in all cases (well, for bash and zsh anyway). This would also seem to be more in line with the requirement since a 'vlock -a' will lock *all* user terminals, not just one.


On Mon, Nov 13, 2017 at 3:03 PM, Steve Grubb <sgrubb@redhat.com> wrote:
On Monday, November 13, 2017 1:02:00 PM EST Trevor Vaughan wrote:
> Is there a reason that 'screen' was chosen over or 'vlock' for
> xccdf_org.ssgproject.content_rule_package_screen_installed?

Common Criteria requirements state that we need to have a self locking screen
after a certain number of minutes of inactivity. Screen can do it, vlock
can't.

-Steve

> 'vlock' is the more target specific and allows for locking *all* user
> consoles by running 'vlock -a'.
>
> Thanks,
>
> Trevor





--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788

-- This account not approved for unencrypted proprietary information --