Detections
Analytics

1.94 APPL-26-002066

Information

The macOS system must disable unattended or automatic login to the system.

GROUP ID: V-277121
RULE ID: SV-277121r1148815

Automatic login must be disabled.

When automatic logins are enabled, the default user account is automatically logged on at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer and find it already logged in. Disabling automatic logins mitigates this risk.

Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000480-GPOS-00229

Solution

Configure the macOS system to disable unattended or automatic login to the system by installing the "com.apple.loginwindow" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/26538

Item Details

Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

References: 800-53|CM-6b., 800-53|IA-2, CCI|CCI-000366, CCI|CCI-000764, Rule-ID|SV-277121r1148815_rule, STIG-ID|APPL-26-002066, Vuln-ID|V-277121

Plugin: Unix

Control ID: 472e4a6dcf4b32f3a5b18c9d4c915de7d577a1dfd31c8eb70cb9c7c89854b5e4