Detections
Analytics

1.254 OL09-00-002161

Information

OL 9 must not allow unattended or automatic logon via the graphical user interface.

GROUP ID: V-271691
RULE ID: SV-271691r1091785

Failure to restrict system access to authenticated users negatively impacts operating system security.

Solution

Configure the GNOME desktop display manager to disable automatic login.

Set AutomaticLoginEnable to false in the [daemon] section in /etc/gdm/custom.conf. For example:

[daemon]
AutomaticLoginEnable=false

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271691r1091785_rule, STIG-ID|OL09-00-002161, Vuln-ID|V-271691

Plugin: Unix

Control ID: 5e72f45c71c067a7dbe83fc182d49c2240cbfc19cc0424ea1121790ded1856e5