The SUSE operating system must not allow unattended or automatic logon via the graphical user interface.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-217139	SLES-12-010380	SV-217139r603262_rule		High

Description
Failure to restrict system access to authenticated users negatively impacts SUSE operating system security.

STIG	Date
SLES 12 Security Technical Implementation Guide	2020-12-04

Details

Check Text ( C-18367r369573_chk )
Note: If a graphical user interface is not installed, this requirement is Not Applicable. Verify the SUSE operating system does not allow unattended or automatic logon via a graphical user interface. Check that unattended or automatic login is disabled with the following command: # sudo grep -i automaticloginenable /etc/gdm/custom.conf AutomaticLoginEnable=false If the "AutomaticLoginEnable" parameter is not set to "false", this is a finding.

Check Text ( C-18367r369573_chk )

Note: If a graphical user interface is not installed, this requirement is Not Applicable.

Verify the SUSE operating system does not allow unattended or automatic logon via a graphical user interface.

Check that unattended or automatic login is disabled with the following command:

# sudo grep -i automaticloginenable /etc/gdm/custom.conf

AutomaticLoginEnable=false

If the "AutomaticLoginEnable" parameter is not set to "false", this is a finding.

Fix Text (F-18365r369574_fix)
Configure the SUSE operating system graphical user interface to not allow unattended or automatic logon to the system. Add or edit the following line in the "/etc/gdm/custom.conf" file directly below the "[daemon]" tag: AutomaticLoginEnable=false