New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[CCE-28304-4] other_users_list_on_login #6

Closed
macosforgebot opened this Issue May 29, 2013 · 5 comments

Comments

@macosforgebot
Copy link

macosforgebot commented May 29, 2013

@DewSecGitHub originally submitted this as ticket:5

  • Version: Beta

CCE#: CCE-28304-4
Setting Name: other_users_list_on_login
Description:
Controls whether the login window shows a list of non-local (other) users from which to choose when logging in, or shows fields in which a user and a password can be entered.

Parameters: N / A
Technical Mechanism: In loginwindow.plist, set the SHOWOTHERUSERS_MANAGED key = false. If the key does not exist, a list of users is displayed.

Reference: N / A

Function: Authentication

Rationale:


SOHO: hide the list
Enterprise: hide the list
SSLF: hide the list


Additional Mechanism: N / A


OVAL Content: N / A


Comment:

@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented May 29, 2013

@DewSecGitHub originally submitted this as comment:1:⁠ticket:5

  • Status changed from new to accepted
@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented May 30, 2013

dubs@… originally submitted this as comment:2:⁠ticket:5


If you implement the policy in CCE-28303-6 then you don't need to apply this setting as it would be irrelevant.

CCE-28303-6 takes the loginwindow out of list mode.

@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented Jun 6, 2013

plink53@… originally submitted this as comment:3:⁠ticket:5


Replying to dubs@…:

If you implement the policy in CCE-28303-6 then you don't need to apply this setting as it would be irrelevant.

CCE-28303-6 takes the loginwindow out of list mode.

SCAP testing programs will check for this setting whether SHOWFULLNAME is set or not, therefore, the SHOWOTHERUSERS_MANAGED value needs to be set to achieve full compliance.

@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented Jul 22, 2013

dubs@… originally submitted this as comment:4:⁠ticket:5


Replying to plink53@…:

Replying to dubs@…:

If you implement the policy in CCE-28303-6 then you don't need to apply this setting as it would be irrelevant.

CCE-28303-6 takes the loginwindow out of list mode.

SCAP testing programs will check for this setting whether SHOWFULLNAME is set or not, therefore, the SHOWOTHERUSERS_MANAGED value needs to be set to achieve full compliance.

Generally speaking then I would say the first test is wrong then. You only need this key set if the SHOWFULLNAME is not in use. If compliance states that you must use the SHOWFULLNAME setting, then this setting will never come into play.

@macosforgebot

This comment has been minimized.

Copy link

macosforgebot commented Aug 6, 2014

blank@… originally submitted this as comment:6:⁠ticket:5

  • Status changed from accepted to closed
  • Resolution set to R8 - Completed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment