Title

Automatic login must be disabled. (Cat I impact)

Discussion

Disabling automatic login is necessary for any level of security. If automatic login is enabled, an intruder can log in without authenticating. Even automatically logging in with a restricted user account, it is still easier to perform malicious actions on the computer.

Check Content

1. Open System Preferences->Security. 2. Select General tab. 3. Ensure "Disable automatic login" option is checked. If option is not checked, this is a finding.

Fix Text

1. Open System Preferences->Security. 2. Select General tab. 3. Select "Disable automatic login".

Additional Identifiers

Rule ID: SV-37251r1_rule

Vulnerability ID: V-25329

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.