Detections
Analytics
RHEL-10-700840 - RHEL 10 must disable the user list at login for graphical user interfaces.
Information
Leaving the user list enabled is a security risk because it allows anyone with physical access to the system to enumerate known user accounts without authenticated access to the system.Solution
Configure RHEL 10 to disable the user list at login for graphical user interfaces.Note: The example below is using the database "local" for the system. If the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.
Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:
$ sudo vi /etc/dconf/db/local.d/02-login-screen
[org/gnome/login-screen]
disable-user-list=true
Update the system databases:
$ sudo dconf update
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_10_V1R1_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 10 STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-281287r1166813_rule, STIG-ID|RHEL-10-700840, Vuln-ID|V-281287
Plugin: Unix
Control ID: b14dca6445b82d3a2e46bf07511c36493ab5bd3f7c2765e19884ebe7dd6df70d