The macOS system must disable unattended or automatic log on to the systemID: oval:org.secpod.oval:def:99383 | Date: (C)2024-04-22 (M)2024-04-23 |
Class: COMPLIANCE | Family: macos |
Automatic logon must be disabled. When automatic logons are enabled, the default user account is automatically logged on at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer and find it already logged in. Disabling automatic logons mitigates this risk.