SLEM 5 must not allow unattended or automatic logon via the graphical user interface (GUI).
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| high | V-261345 | SRG-OS-000480-GPOS-00229 | SLEM-05-272010 | SV-261345r996493_rule | 2026-02-10 | 1 |
Description
Failure to restrict system access to authenticated users negatively impacts SLEM 5 security.
ℹ️ Check
Note: If a graphical user interface is not installed, this requirement is not applicable.
Verify SLEM 5 does not allow unattended or automatic logon via the GUI.
Check that unattended or automatic login is disabled with the following commands:
> grep -i ^DISPLAYMANAGER_AUTOLOGIN /etc/sysconfig/displaymanager
DISPLAYMANAGER_AUTOLOGIN=""
> grep -i ^DISPLAYMANAGER_PASSWORD_LESS_LOGIN /etc/sysconfig/displaymanager
DISPLAYMANAGER_PASSWORD_LESS_LOGIN="no"
If the "DISPLAYMANAGER_AUTOLOGIN" parameter includes a username or the "DISPLAYMANAGER_PASSWORD_LESS_LOGIN" is not set to "no", this is a finding.
✔️ Fix
Note: If a graphical user interface is not installed, this requirement is not applicable.
Configure SLEM 5 GUI to not allow unattended or automatic logon to the system.
Add or modify the following lines in the "/etc/sysconfig/displaymanager" file:
DISPLAYMANAGER_AUTOLOGIN=""
DISPLAYMANAGER_PASSWORD_LESS_LOGIN="no"