1.113 ALMA-09-015420

Information

AlmaLinux OS 9 must not allow unattended or automatic logon via the graphical user interface.

GROUP ID: V-269216
RULE ID: SV-269216r1050098

Failure to restrict system access to authenticated users negatively impacts operating system security.

Solution

Configure the GNOME desktop display manager to disable automatic login.

Set AutomaticLoginEnable to false in the [daemon] section in /etc/gdm/custom.conf. For example:

[daemon]
AutomaticLoginEnable=false

See Also

https://workbench.cisecurity.org/benchmarks/27039