#
## CC Base / MLS mode configuration START
#
# DISA STIG requirement GEN001780
mesg n
#
# ssh / ssh-keygen use of /dev/random as seed source
# You MUST enable the following lines to be compliant with the
# requirements of the evaluated configuration. For a description of this
# configuration and its implication, see /etc/sysconfig/sshd. Use the
# 'readonly' setting to ensure that all users are required to use this
# variable.
export SSH_USE_STRONG_RNG=1
readonly SSH_USE_STRONG_RNG
# 
# Enable the following lines to enforce a screen saver for every
# user after a given period of inactivity. The configuration of the
# inactivity threshold is done in /etc/screenrc by modifying the
# value in the line:
#
#	idle XXX lockscreen
#
# where XXX is the threshold value in seconds
#
# You MAY disable the screen functionality completely by commenting the
# following out if the functionality of locking the screen is not desired.
# If you disable screen here, make sure you also remove the trap command
# at the beginning of this file.
#
# Note: waiting for 10 seconds allows the user to read the banner information
#
# if you want to prevent users to set their own threshold value, you
# have to append the option "-c /dev/null" to the following call
# which prevents the loading of ~/.screenrc
SCREENEXEC="screen"
# SCREENEXEC="screen -c /dev/null"
if [ -w $(tty) ] ; then
	trap "exec $SCREENEXEC" 1 2 3 15
	echo -n 'Starting session in 10 seconds'
	sleep 10
	exec $SCREENEXEC
fi
#
## CC Base / MLS mode configuration END
