<Group id="sessions">
	<title>Session Security</title>
	<description>To support secured access to webmin.</description>

	<Value id="var_webmin_sessions_login_banner_text" type="string" operator="equals" interactive="0">
	<title>Login Banner Verbiage</title>
	<description>Enter an appropriate login banner for your organization. Please note that new lines must
	be expressed by the '\n' character and special characters like parentheses and quotation marks must be escaped with '\'.</description>
	<!-- <value selector="any_text">.+</value> -->
	<value selector="">
	-- WARNING --[\s\n]*This system is for the use of authorized users only. Individuals[\s\n]*using this computer system without authority or in excess of their[\s\n]*authority are subject to having all their activities on this system[\s\n]*monitored and recorded by system personnel. Anyone using this[\s\n]*system expressly consents to such monitoring and is advised that[\s\n]*if such monitoring reveals possible evidence of criminal activity[\s\n]*system personal may provide the evidence of such monitoring to law[\s\n]*enforcement officials.</value>
	<value selector="usgcb_default">
	-- WARNING --[\s\n]*This system is for the use of authorized users only. Individuals[\s\n]*using this computer system without authority or in excess of their[\s\n]*authority are subject to having all their activities on this system[\s\n]*monitored and recorded by system personnel. Anyone using this[\s\n]*system expressly consents to such monitoring and is advised that[\s\n]*if such monitoring reveals possible evidence of criminal activity[\s\n]*system personal may provide the evidence of such monitoring to law[\s\n]*enforcement officials.</value>
	<value selector="dod_default">You[\s\n]+are[\s\n]+accessing[\s\n]+a[\s\n]+U.S.[\s\n]+Government[\s\n]+\(USG\)[\s\n]+Information[\s\n]+System[\s\n]+\(IS\)[\s\n]+that[\s\n]+is[\s\n]+provided[\s\n]+for[\s\n]+USG-authorized[\s\n]+use[\s\n]+only.[\s\n]*By[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+\(which[\s\n]+includes[\s\n]+any[\s\n]+device[\s\n]+attached[\s\n]+to[\s\n]+this[\s\n]+IS\),[\s\n]+you[\s\n]+consent[\s\n]+to[\s\n]+the[\s\n]+following[\s\n]+conditions\:[\s\n]*-[\s\n]*The[\s\n]+USG[\s\n]+routinely[\s\n]+intercepts[\s\n]+and[\s\n]+monitors[\s\n]+communications[\s\n]+on[\s\n]+this[\s\n]+IS[\s\n]+for[\s\n]+purposes[\s\n]+including,[\s\n]+but[\s\n]+not[\s\n]+limited[\s\n]+to,[\s\n]+penetration[\s\n]+testing,[\s\n]+COMSEC[\s\n]+monitoring,[\s\n]+network[\s\n]+operations[\s\n]+and[\s\n]+defense,[\s\n]+personnel[\s\n]+misconduct[\s\n]+\(PM\),[\s\n]+law[\s\n]+enforcement[\s\n]+\(LE\),[\s\n]+and[\s\n]+counterintelligence[\s\n]+\(CI\)[\s\n]+investigations.[\s\n]*-[\s\n]*At[\s\n]+any[\s\n]+time,[\s\n]+the[\s\n]+USG[\s\n]+may[\s\n]+inspect[\s\n]+and[\s\n]+seize[\s\n]+data[\s\n]+stored[\s\n]+on[\s\n]+this[\s\n]+IS.[\s\n]*-[\s\n]*Communications[\s\n]+using,[\s\n]+or[\s\n]+data[\s\n]+stored[\s\n]+on,[\s\n]+this[\s\n]+IS[\s\n]+are[\s\n]+not[\s\n]+private,[\s\n]+are[\s\n]+subject[\s\n]+to[\s\n]+routine[\s\n]+monitoring,[\s\n]+interception,[\s\n]+and[\s\n]+search,[\s\n]+and[\s\n]+may[\s\n]+be[\s\n]+disclosed[\s\n]+or[\s\n]+used[\s\n]+for[\s\n]+any[\s\n]+USG-authorized[\s\n]+purpose.[\s\n]*-[\s\n]*This[\s\n]+IS[\s\n]+includes[\s\n]+security[\s\n]+measures[\s\n]+\(e.g.,[\s\n]+authentication[\s\n]+and[\s\n]+access[\s\n]+controls\)[\s\n]+to[\s\n]+protect[\s\n]+USG[\s\n]+interests[\s\n]+--[\s\n]+not[\s\n]+for[\s\n]+your[\s\n]+personal[\s\n]+benefit[\s\n]+or[\s\n]+privacy.[\s\n]*-[\s\n]*Notwithstanding[\s\n]+the[\s\n]+above,[\s\n]+using[\s\n]+this[\s\n]+IS[\s\n]+does[\s\n]+not[\s\n]+constitute[\s\n]+consent[\s\n]+to[\s\n]+PM,[\s\n]+LE[\s\n]+or[\s\n]+CI[\s\n]+investigative[\s\n]+searching[\s\n]+or[\s\n]+monitoring[\s\n]+of[\s\n]+the[\s\n]+content[\s\n]+of[\s\n]+privileged[\s\n]+communications,[\s\n]+or[\s\n]+work[\s\n]+product,[\s\n]+related[\s\n]+to[\s\n]+personal[\s\n]+representation[\s\n]+or[\s\n]+services[\s\n]+by[\s\n]+attorneys,[\s\n]+psychotherapists,[\s\n]+or[\s\n]+clergy,[\s\n]+and[\s\n]+their[\s\n]+assistants.[\s\n]+Such[\s\n]+communications[\s\n]+and[\s\n]+work[\s\n]+product[\s\n]+are[\s\n]+private[\s\n]+and[\s\n]+confidential.[\s\n]+See[\s\n]+User[\s\n]+Agreement[\s\n]+for[\s\n]+details.</value>
	<value selector="dod_short">I\'ve read \&amp; consent to terms in IS user agreement.</value>
	</Value>

	<Value id="var_webmin_sessions_port" type="number" >
	<title>Webmin port</title>
	<description>Webmin port</description>
	<value selector="">15000</value>
	<value selector="10000">10000</value>
	<value selector="15000">15000</value>
	</Value>

	<Value id="var_webmin_sessions_timeout" type="number" >
	<title>Session idle timeout</title>
	<description>Session idle timeout</description>
	<value selector="">15</value>
	<value selector="5">5</value>
	<value selector="10">10</value>
	<value selector="15">15</value>
	<value selector="20">20</value>
	</Value>
	
	<Rule id="sessions_login_banner" severity="medium">
	<title>Display approved login banner prior to login.</title>
	<description>
	Display approved login banner prior to login.
	</description>
	<rationale>
	</rationale>
	<oval id="sessions_login_banner" value="var_webmin_sessions_login_banner_text" />
	<ident cce="" />
	<ref nist="IA-5(f)" />
	</Rule>

	<Rule id="sessions_port" severity="medium">
	<title>Configure approved webmin port.</title>
	<description>
	Configure approved webmin port.
	</description>
	<rationale>
	</rationale>
	<oval id="sessions_port" value="var_webmin_sessions_port" />
	<ident cce="" />
	<ref nist="IA-5(f)" />
	</Rule>
	
	<Rule id="sessions_save_password" severity="medium">
	<title>Prevent the ability for a user to save their login credentials for future access.</title>
	<description>
	Prevent the ability for a user to save their login credentials for future access.
	</description>
	<rationale>
	</rationale>
	<oval id="sessions_save_password" />
	<ident cce="" />
	<ref nist="IA-5(f)" />
	</Rule>

	<Rule id="sessions_ssl_cipher" severity="medium">
	<title>Use approved ciphers for encryption.</title>
	<description>
	Use approved ciphers for encryption.
	</description>
	<rationale>
	</rationale>
	<oval id="sessions_ssl_cipher"/>
	<ident cce="" />
	<ref nist="IA-5(f)" />
	</Rule>

	<Rule id="sessions_ssl_enabled" severity="medium">
	<title>Encryption is enabled and enforced.</title>
	<description>
	Encryption is enabled and enforced.
	</description>
	<rationale>
	</rationale>
	<oval id="sessions_ssl_enabled"/>
	<ident cce="" />
	<ref nist="IA-5(f)" />
	</Rule>

	<Rule id="sessions_timeout" severity="medium">
	<title>Sessions are closed after idling a specified number of minutes.</title>
	<description>
	Sessions are closed after idling a specified number of minutes.
	</description>
	<rationale>
	</rationale>
	<oval id="sessions_timeout" value="var_webmin_sessions_timeout" />
	<ident cce="" />
	<ref nist="IA-5(f)" />
	</Rule>

</Group>
