Login window must be properly configured.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Part of OSX00310-login display name/password

Associated with IA controls: ECSC-1

SV-37221r1_rule Login window must be properly configured.

Vulnerability discussion

If not properly configured, the logon screen provides a list of local user names available for logon. A user could use this information to attempt to login as a different user.

Check content

1. Open System Preferences->Accounts Panel. 2. Select Login Options. 3. Ensure "Display login window as:" is set to "Name & password". If the option is not set to "Name & Password", this is a finding.

Fix text

1. Open System Preferences->Accounts Panel. 2. Select Login Options. 3. Set "Display login window as:" to 'Name & password'.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.