← Back to Anduril NixOS Security Technical Implementation Guide

V-268172

CAT I (High)

NixOS must not allow an unattended or automatic logon to the system via the console.

Rule ID

SV-268172r1131152_rule

STIG

Anduril NixOS Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

Failure to restrict system access via the console to authenticated users negatively impacts operating system security.

Check Content

Verify NixOS does not allow an unattended or automatic logon to the system via the console with the following command:

$ grep -iR autologon.user /etc/nixos

If "services.xserver.displayManager.autologon.user" is defined and is not "null", this is a finding.

Fix Text

Configure NixOS to not allow an unattended or automatic logon to the system via the console.

Add the following Nix code to the NixOS Configuration, usually located in /etc/nixos/configuration.nix or /etc/nixos/flake.nix:

services.xserver.displayManager.autologon.user = null;

Rebuild and switch to the new NixOS configuration:
$ sudo nixos-rebuild switch

A reboot is required for the changes to take effect.