How to set default session timeout in Linux

My DC operation guys access Linux servers on a daily basis but somehow they never remember to log out. This is a security risk as anyone could gain access to the open console and create caos.

Today, yet again I’m forced to play the bad guy by dummy proofing my Linux servers by implementing default timeout for user sessions.

Bash and Korn both support the TMOUT variable which I will use to set the default timeout.

The etc/.bashrc file will apply the timeout system wide but if you need it to be user specific then modify the ~/.bashrc file instead.

Here’s how it’s done.

echo "TMOUT=300 >> /etc/bashrc

echo "readonly TMOUT" >> /etc/bashrc

echo "export TMOUT" >> /etc/bashrc

Log off, start a new session and wait for 5 minutes. Your session should terminate

2 Responses to “How to set default session timeout in Linux”

Author comments are in a darker gray color for you to easily identify the posts author in the comments

1. Manojg says:

   April 29, 2008 at 9:00 pm

   This is helpful. what is the equivalent variable for c shell? I connect to the remote computer via ssh and I am being log out after certain time if I stop working. I checked the /etc/bashrc and /etc/csh.cshrc files in remote computer, and ~.bashrc and ~.cshrc files in my local computer but I could not find anything about the log out time. Where is this log out time hidden?

   Thanks.

   Reply
2. Shrirang says:

   October 16, 2008 at 2:37 am

   Danesh,

   Does the soultion work if someone enables the keepalive configuration in the client application (like putty)? It will not, since the client will keep sending null packets to the server, so it will never seem like the client is idle.

   Thanks,

   Shrirang.

   Reply