Download
| Alert*
|
CCE-95270-5
"Disable Automatic Logons When automatic logins are enabled, the default user account is automatically logged in at boot time without prompting the user for a password. Even if the screen is later locked, a malicious user would be able to reboot the computer in order to log in. Disabling automatic ... CCE-95256-4 "Set Minimum Password Length to 15 Characters The minimum password length must be set to 15 characters. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password length is one factor of several that helps to ... CCE-95232-5 "Enable Application Firewall The Application Firewall is the built in firewall that comes with Mac OS X and must be enabled. Firewalls protect computers from network attacks by blocking or limiting access to open network ports. Application firewalls limit which applications are allowed to communica ... CCE-95258-0 "Set the Global Umask Setting for Users The default global umask setting must be set to '027' for user applications. The setting '027' ensures that user created files and directories will be readable, but not writable, by users that share the same group id. Users with a differen ... CCE-95251-5 "Password hints on lock screen Controls whether inactivity logs out a user and, if so, how many minutes are required to trigger logout." CCE-95218-4 "Disable guest account login The Guest account, a special managed account, is considered a security vulnerability in most situations because it has no password associated with it. Once an attacker has gained guest-level access, the attacker can try to elevate privileges to further exploit a system. ... CCE-95235-8 "Numeric Character in Passwords Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute-force attacks. Password complexity i ... CCE-95238-2 "Maximum password lifetime restriction Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed periodically. One method of minimizing this risk is to use complex passwords and periodically change them. If the operating system does not limit the lifet ... CCE-95263-0 "Prevent Users from Logging in as Root Directly Administrator users must never log in directly as root. To assure individual accountability and prevent unauthorized access, logging in as root over a remote connection must be disabled. Administrators should only run commands as root after first auth ... CCE-95201-0 "Enable Auto Update Automatically checking for updates makes it easier for the user to know when updates are available. It is important that a system has the newest updates applied to prevent unauthorized persons from exploiting identified vulnerabilities." CCE-95207-7 "Set the Global Umask Setting for System Process The default global umask setting must be set to '027' for user applications. The setting '027' ensures that user created files and directories will be readable, but not writable, by users that share the same group id. Users with a ... CCE-95203-6 "Enable macOS update installs This setting allows macOS updates to be installed automatically once they are available from Apple. Because patches need to be applied as soon as possible, allowing for automatic updates ensures that the user's device is updated in a timely manner rather than be left v ... CCE-95252-3 "Disable fast user switching Controls whether a user can use the OSX GUI to start or switch to a login session running as another user concurrently." |
