Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The operating system must not allow an unattended or automatic logon to the system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-67697 | AOSX-11-000925 | SV-82187r1_rule | Medium |
| Description |
|---|
| When automatic logins are enabled, the default user account is automatically logged in at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer in order to log in. Disabling automatic logins mitigates this risk. |
| STIG | Date |
|---|---|
| Apple OS X 10.11 Security Technical Implementation Guide | 2017-04-06 |
Details
| Check Text ( C-68263r1_chk ) |
|---|
| To check if the system is configured to automatically log on, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableAutoLoginClient If "com.apple.login.mcx.DisableAutoLoginClient" is not set to "1", this is a finding. |
| Fix Text (F-73811r1_fix) |
|---|
| This setting is enforced using the "Login Window Policy" configuration profile. |