Linux lock screen policy enables consistent device governance
Every operating system should have security controls deployed, and Linux is no exception. Having a lock-screen policy is even more important with a remote workforce where team members might use a local cafe or other insecure places like “office”, increasing the chances of bad actors can physically access the devices. JumpCloud has created an easy-to-deploy policy for configuring lock screen settings for Linux across your fleet, providing consistent governance and a scalable method for secure OS configuration.
Policy is a free addition to the JumpCloud platform, providing consistent cross-OS governance from a centralized repository. Alternatively, IT admins should configure settings on an individual basis using the Linux control panel, implementing a plugin, or remembering to use the CLI to force a device lock security command. . JumpCloud’s approach provides security at scale, saving time and money.
Policies can be tied to a defined Linux device group that will immediately deploy changes through a point-and-click management interface. Other preconfigured Linux policies can be found by searching for “Linux”. The JumpCloud PowerShell module can also run custom commands with sudo device access, extending what is possible through the platform.
How to configure this policy?
Setting up lock screen policy for Linux is simple, but first check if you already have a lock screen policy established for your Windows devices in JumpCloud’s Policy Management. The name of the existing policy must first be changed from the default to something new — for example, “lock windows screen” — to avoid an error. There is a text field under the “Policy Name” header. You can then move on to the next steps after making this change, if needed.
- Create a device group for your Linux machines if you haven’t already
- Tap the plus sign under Policy Management
- Select the Linux tab and select “Lock screen”
- Enter the timeout under Settings, which is in seconds
- Select the device groups tab, check the Linux group and click save.; this can also be done for individual devices
- The font is now linked (Read more…)