Would using an Exit Trap with TMOUT
to spawn vlock
work? That should work in all cases (well, for bash and zsh
anyway). This would also seem to be more in line with the requirement since a 'vlock -a' will lock *all* user terminals, not just one.
On Monday, November 13, 2017 1:02:00 PM EST Trevor Vaughan wrote:
> Is there a reason that 'screen' was chosen over or 'vlock' for
> xccdf_org.ssgproject.content_rule_package_screen_installed? Common Criteria requirements state that we need to have a self locking screen
after a certain number of minutes of inactivity. Screen can do it, vlock
can't.
-Steve
> 'vlock' is the more target specific and allows for locking *all* user
> consoles by running 'vlock -a'.
>
> Thanks,
>
> Trevor