The system must not allow autologin capabilities from the GNOME desktop.
An XCCDF Rule
Description
As automatic logins are a known security risk for other than "kiosk" types of systems, GNOME automatic login should be disabled in pam.conf.
- ID
- SV-216122r959010_rule
- Version
- SOL-11.1-040410
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
The root role is required.
Modify the /etc/pam.d/gdm-autologin file.
# pfedit /etc/pam.d/gdm-autologin