Detections
Analytics

RHEL-06-000527 - The login user list must be disabled.

Information

Leaving the user list enabled is a security risk since it allows anyone with physical access to the system to quickly enumerate known user accounts without logging in.

Solution

In the default graphical environment, users logging directly into the system are greeted with a login screen that displays all known users. This functionality should be disabled.

Run the following command to disable the user list:

$ sudo gconftool-2 --direct
--config-source xml:readwrite:/etc/gconf/gconf.xml.mandatory
--type bool --set /apps/gdm/simple-greeter/disable_user_list true

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_6_V2R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-218105r603264_rule, STIG-ID|RHEL-06-000527, STIG-Legacy|SV-55880, STIG-Legacy|V-43150, Vuln-ID|V-218105

Plugin: Unix

Control ID: e376244448dc47207a407b227162776672d2c9fca7680cad0f20141091aa1e1c