Detections
Analytics
APPL-26-002066 - The macOS system must disable unattended or automatic login to the system.
Information
Automatic login must be disabled.When automatic logins are enabled, the default user account is automatically logged on at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer and find it already logged in. Disabling automatic logins mitigates this risk.
Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000480-GPOS-00229
Solution
Configure the macOS system to disable unattended or automatic login to the system by installing the "com.apple.loginwindow" configuration profile.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_26_V1R3_STIG.zip
Item Details
Audit Name: DISA Apple macOS 26 Tahoe STIG v1r3
Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION
References: 800-53|CM-6b., 800-53|IA-2, CAT|I, CCI|CCI-000366, CCI|CCI-000764, Rule-ID|SV-277121r1148815_rule, STIG-ID|APPL-26-002066, Vuln-ID|V-277121
Plugin: Unix
Control ID: 695499508cce9289eec013738ab2f3c4b9d9fd1c22133cf6b962b2f7bac79406