Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Automatic login must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-25329 | OSX00425 M6 | SV-37251r1_rule | IAAC-1 | High |
| Description |
|---|
| Disabling automatic login is necessary for any level of security. If automatic login is enabled, an intruder can log in without authenticating. Even automatically logging in with a restricted user account, it is still easier to perform malicious actions on the computer. |
| STIG | Date |
|---|---|
| MAC OSX 10.6 Workstation Security Technical Implementation Guide | 2012-01-30 |
Details
| Check Text ( C-35942r1_chk ) |
|---|
| 1. Open System Preferences->Security. 2. Select General tab. 3. Ensure "Disable automatic login" option is checked. If option is not checked, this is a finding. |
| Fix Text (F-31198r1_fix) |
|---|
| 1. Open System Preferences->Security. 2. Select General tab. 3. Select "Disable automatic login". |