STIGQter: STIG Summary: Anduril NixOS Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

NixOS must not allow an unattended or automatic logon to the system via the console.

DISA Rule

SV-268172r1131152_rule

Vulnerability Number

V-268172

Group Title

SRG-OS-000480-GPOS-00229

Rule Version

ANIX-00-001880

Severity

CAT I

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure NixOS to not allow an unattended or automatic logon to the system via the console.

Add the following Nix code to the NixOS Configuration, usually located in /etc/nixos/configuration.nix or /etc/nixos/flake.nix:

services.xserver.displayManager.autologon.user = null;

Rebuild and switch to the new NixOS configuration:
$ sudo nixos-rebuild switch

A reboot is required for the changes to take effect.

Check Contents

Verify NixOS does not allow an unattended or automatic logon to the system via the console with the following command:

$ grep -iR autologon.user /etc/nixos

If "services.xserver.displayManager.autologon.user" is defined and is not "null", this is a finding.

Vulnerability Number

V-268172

Documentable

False

Rule Version

ANIX-00-001880

Severity Override Guidance

Verify NixOS does not allow an unattended or automatic logon to the system via the console with the following command:

$ grep -iR autologon.user /etc/nixos

If "services.xserver.displayManager.autologon.user" is defined and is not "null", this is a finding.

Check Content Reference

M

Target Key

5658