The system must display a publicly-viewable pattern during a graphical desktop environment session lock.

From HP-UX 11.31 Security Technical Implementation Guide

Associated with IA controls: PESL-1

Associated with: CCI-000061

SV-38275r1_rule The system must display a publicly-viewable pattern during a graphical desktop environment session lock.

Vulnerability discussion

To protect the on-screen content of a session, it must be replaced with a publicly-viewable pattern upon session lock. Examples of publicly viewable patterns include screen saver patterns, photographic images, solid colors, or a blank screen, so long as none of those patterns convey sensitive information.This requirement applies to graphical desktop environments provided by the system to locally attached displays and input devices, as well as, to graphical desktop environments provided to remote systems using remote access protocols.

Check content

NOTE: This will virtually always be a manual review. Determine if a publicly-viewable pattern is displayed during a session lock. If the session lock pattern is not publicly-viewable, this is a finding.

Fix text

Configure the system to display a publicly-viewable pattern during a session lock.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.