Detections
Analytics

1.96 APPL-15-002066

Information

The macOS system must disable unattended or automatic login to the system.

GROUP ID: V-268512
RULE ID: SV-268512r1034476

Automatic login must be disabled.

When automatic logins are enabled, the default user account is automatically logged on at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer and find it already logged in. Disabling automatic logins mitigates this risk.

Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000480-GPOS-00229

Solution

Configure the macOS system to disable unattended or automatic login to the system by installing the "com.apple.loginwindow" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/26537

Item Details

Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

References: 800-53|CM-6b., 800-53|IA-2, CCI|CCI-000366, CCI|CCI-000764, Rule-ID|SV-268512r1034476_rule, STIG-ID|APPL-15-002066, Vuln-ID|V-268512

Plugin: Unix

Control ID: 604f2a41692b9c5c9847512368507d9b4e0f22cd7c9fce88ec77ee8c96ba3512