1.213 SLES-15-040430

Information

The SUSE operating system must not allow unattended or automatic logon via the graphical user interface (GUI).

GROUP ID: V-235031
RULE ID: SV-235031r991591

Failure to restrict system access to authenticated users negatively impacts SUSE operating system security.

Solution

Note : If a graphical user interface is not installed, this requirement is Not Applicable.

Configure the SUSE operating system GUI to not allow unattended or automatic logon to the system.

Add or edit the following lines in the "/etc/sysconfig/displaymanager"configuration file:

DISPLAYMANAGER_AUTOLOGIN=""
DISPLAYMANAGER_PASSWORD_LESS_LOGIN="no"

See Also

https://workbench.cisecurity.org/benchmarks/23779