Detections
Analytics

1.8.13 Ensure automatic logon via GUI is not allowed

Information

The operating system must not allow an unattended or automatic logon to the system via a graphical user interface.

Failure to restrict system unattended or automatic logon to the system negatively impacts operating system security.

Solution

Configure the operating system to not allow an unattended or automatic logon to the system via a graphical user interface.

Add or edit the line for the AutomaticLoginEnable parameter in the [daemon] section of the /etc/gdm/custom.conf file to false :

Example: vim /etc/gdm/custom.conf

[daemon]
AutomaticLoginEnable=false

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, CSCv7|4.4, Rule-ID|SV-204432r603261_rule, STIG-ID|RHEL-07-010440, Vuln-ID|V-204432

Plugin: Unix

Control ID: be64234bc360c9d0b75d5929d5114dde13a7efa6d8680ffe52c59ba75871dcb3