Title

Input menu must not be shown in login window. (Cat I impact)

Discussion

Showing input in the login window could compromise the integrity of the information, and could also allow someone shoulder surfing to gain unauthorized access to the system.

Check Content

1. Open System Preferences->Accounts Panel. 2. Select Login Options. 3. Ensure the "Show input menu in login window" is not checked. If the option is checked, this is a finding.

Fix Text

1. Open System Preferences->Accounts Panel. 2. Select Login Options. 3. Deselect "Show input menu in login window" to disable this option.

Additional Identifiers

Rule ID: SV-37225r1_rule

Vulnerability ID: V-25304

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.