UCF STIG Viewer Logo

Login window must be properly configured.


Overview

Finding ID Version Rule ID IA Controls Severity
V-25302 OSX00310 M6 SV-37221r1_rule ECSC-1 Medium
Description
If not properly configured, the logon screen provides a list of local user names available for logon. A user could use this information to attempt to login as a different user.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide 2013-04-09

Details

Check Text ( C-35910r1_chk )
1. Open System Preferences->Accounts Panel.
2. Select Login Options.
3. Ensure "Display login window as:" is set to "Name & password". If the option is not set to "Name & Password", this is a finding.
Fix Text (F-31168r1_fix)
1. Open System Preferences->Accounts Panel.
2. Select Login Options.
3. Set "Display login window as:" to 'Name & password'.