Skip to content
Log In

AlmaLinux OS 9 must disable the user list at logon for graphical user interfaces.

An XCCDF Rule

Description

Leaving the user list enabled is a security risk since it allows anyone with physical access to the system to enumerate known user accounts without authenticated access to the system.

ID
SV-269207r1050089_rule
Version
ALMA-09-014430
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure AlmaLinux OS 9 to disable the user list at logon for graphical user interfaces.

Create a database to contain the systemwide screensaver settings (if it does not already exist) with the following command:

Note: The example below is using the database "local" for the system, so if the system is using another database in "/etc/dconf/profile/user", the file should be created under the appropriate subdirectory.