Closing inactive Webmin sessions automatically
Webmin's login sessions are not set to expire by default. This causes a potential security risk. If a user leaves his or her computer unattended while logged into Webmin, an attacker could potentially use the situation to harm your system or disable its security. Fortunately, this situation is easily remedied by changing a Webmin setting.
How to do it...
Perform the following steps to close inactive Webmin sessions automatically:
Navigate to Webmin | Webmin Configuration | Authentication.
Tick the checkbox marked as Auto-logout and set the automatic logout to happen after 10 minutes of inactivity.
Click Save.
How it works...
Webmin stores authentication options in its server configuration file (/etc/webmin/miniserv.conf by default). The line defining inactivity time after which users will be automatically logged out starts with the keyword logouttime and specifies the time in minutes. For instance, it may look like this:
logouttime=10
Whenever a client...
