AOSX-13-000930 - The macOS system logon window must be configured to prompt for username and password, rather than show a list of users.

Information

The logon window must be configured to prompt all users for both a username and a password. By default, the system displays a list of known users at the logon screen. This gives an advantage to an attacker with physical access to the system, as the attacker would only have to guess the password for one of the listed accounts.

Solution

This setting is enforced using the 'Login Window Policy' configuration profile.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_OS_X_10-13_V2R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-214895r609363_rule, STIG-ID|AOSX-13-000930, STIG-Legacy|SV-96383, STIG-Legacy|V-81669, Vuln-ID|V-214895

Plugin: Unix

Control ID: 0b116f1e06393828913c583a5a0f52b6406c4fbbe500ba39db179b2751c33c14