UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Unattended or automatic login via the Graphical User Interface must not be allowed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-214972 UBTU-16-010330 SV-214972r610931_rule High
Description
Failure to restrict system access to authenticated users negatively impacts Ubuntu operating system security.
STIG Date
Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide 2020-12-09

Details

Check Text ( C-16171r284784_chk )
Verify that unattended or automatic login via the Graphical User Interface is disabled.

Check that unattended or automatic login is disabled with the following command:

# sudo grep -i autologin /etc/lightdm/lightdm.conf /etc/lightdm.d/*.conf | grep -v '#'

If any results are returned, this is a finding.
Fix Text (F-16169r284785_fix)
Configure the Graphical User Interface to not allow unattended or automatic login to the system.

Comment or remove the following lines in "/etc/lightdm/lightdm.conf" file:

#autologin-user=
#autologin-user-timeout=0