Notes on how to set a default and/or mandatory screensaver policy on our Linux systems, so that we can more likely comply with the BNL screensaver policy.

RHEL/SL 3 and 4:

edit /usr/X11R6/lib/X11/app-defaults/XScreenSaver to have a "lockTimeout" defined.  eg:

*timeout:         0:10:00
*cycle:           0:10:00
*lockTimeout:     0:05:00
*passwdTimeout:   0:00:30

This will set the default, though each user can then modify their own settings.

RHEL/SL 5:

Here's one way to manipulate the default policy and set a mandatory policy for Gnome:

gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.defaults \
  --type bool \
  --set /apps/gnome-screensaver/idle_activation_enabled true
gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.defaults \
  --type bool \
  --set /apps/gnome-screensaver/lock_enabled true
gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.defaults \
  --type string \
  --set /apps/gnome-screensaver/mode blank-only
gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.defaults \
  --type int \
  --set /apps/gnome-screensaver/idle_delay 15


gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
  --type bool \
  --set /apps/gnome-screensaver/idle_activation_enabled true
gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
  --type bool \
  --set /apps/gnome-screensaver/lock_enabled true
gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
  --type string \
  --set /apps/gnome-screensaver/mode blank-only
gconftool-2 --direct \
  --config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory \
  --type int \
  --set /apps/gnome-screensaver/idle_delay 15