AOSX-13-000005 - The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.

800-53|AC-11(1)

CAT|III

CCI|CCI-000060

Rule-ID|SV-214802r507075_rule

STIG-ID|AOSX-13-000005

STIG-Legacy|SV-96177

STIG-Legacy|V-81463

Vuln-ID|V-214802

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-bl-corner

800-53|AC-11

CAT|II

Rule-ID|SV-214803r507075_rule

STIG-ID|AOSX-13-000006

STIG-Legacy|SV-96179

STIG-Legacy|V-81465

Vuln-ID|V-214803

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-br-corner

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-tl-corner

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-tr-corner

AOSX-13-000007 - The macOS system must be configured to prevent Apple Watch from terminating a session lock.

800-53|CM-7

CCI|CCI-000056

Rule-ID|SV-214804r507075_rule

STIG-ID|AOSX-13-000007

STIG-Legacy|SV-96181

STIG-Legacy|V-81467

Vuln-ID|V-214804

AOSX-13-000010 - The macOS system must initiate a session lock after a 15-minute period of inactivity.

CCI|CCI-000057

CSCv6|16.5

Rule-ID|SV-214805r507075_rule

STIG-ID|AOSX-13-000010

STIG-Legacy|SV-96183

STIG-Legacy|V-81469

Vuln-ID|V-214805

AOSX-13-000020 - The macOS system must retain the session lock until the user reestablishes access using established identification and authentication procedures.

Rule-ID|SV-214806r507075_rule

STIG-ID|AOSX-13-000020

STIG-Legacy|SV-96185

STIG-Legacy|V-81471

Vuln-ID|V-214806

AOSX-13-000025 - The macOS system must initiate the session lock no more than five seconds after a screen saver is started.

Rule-ID|SV-214807r507075_rule

STIG-ID|AOSX-13-000025

STIG-Legacy|SV-96187

STIG-Legacy|V-81473

Vuln-ID|V-214807

AOSX-13-000030 - The macOS system must monitor remote access methods and generate audit records when successful/unsuccessful attempts to access/modify privileges occur.

800-53|AU-12

CCI|CCI-000067

CCI|CCI-000172

Rule-ID|SV-214808r507075_rule

STIG-ID|AOSX-13-000030

STIG-Legacy|SV-96189

STIG-Legacy|V-81475

Vuln-ID|V-214808

AOSX-13-000035 - The macOS system must implement DoD-approved encryption to protect the confidentiality and integrity of remote access sessions including transmitted data and data during preparation for transmission.

CAT|I

CCI|CCI-000068

CCI|CCI-002418

CCI|CCI-002420

CCI|CCI-002421

CCI|CCI-002422

Rule-ID|SV-214809r507075_rule

STIG-ID|AOSX-13-000035

STIG-Legacy|SV-96191

STIG-Legacy|V-81477

Vuln-ID|V-214809

AOSX-13-000050 - The macOS system must be configured to disable rshd service.

CCI|CCI-000381

Rule-ID|SV-214810r507075_rule

STIG-ID|AOSX-13-000050

STIG-Legacy|SV-96193

STIG-Legacy|V-81479

Vuln-ID|V-214810

AOSX-13-000055 - The macOS system must enforce requirements for remote connections to the information system.

CCI|CCI-000366

Rule-ID|SV-214811r507075_rule

STIG-ID|AOSX-13-000055

STIG-Legacy|SV-96195

STIG-Legacy|V-81481

Vuln-ID|V-214811

AOSX-13-000065 - The macOS system must be configured with Bluetooth turned off unless approved by the organization.

Rule-ID|SV-214812r507075_rule

STIG-ID|AOSX-13-000065

STIG-Legacy|SV-96197

STIG-Legacy|V-81483

Vuln-ID|V-214812

AOSX-13-000070 - The macOS system must be configured with Wi-Fi support software disabled.

CCI|CCI-001443

CCI|CCI-001444

CSCv6|9.1

Rule-ID|SV-214813r507075_rule

STIG-ID|AOSX-13-000070

STIG-Legacy|SV-96199

STIG-Legacy|V-81485

Vuln-ID|V-214813

AOSX-13-000075 - The macOS system must be configured with Infrared [IR] support disabled.

800-53|CM-6

CSCv6|3.1

Rule-ID|SV-214814r507075_rule

STIG-ID|AOSX-13-000075

STIG-Legacy|SV-96201

STIG-Legacy|V-81487

Vuln-ID|V-214814

AOSX-13-000085 - The macOS system must be configured with automatic actions disabled for blank CDs.

Rule-ID|SV-214815r507075_rule

STIG-ID|AOSX-13-000085

STIG-Legacy|SV-96203

STIG-Legacy|V-81489

Vuln-ID|V-214815

AOSX-13-000090 - The macOS system must be configured with automatic actions disabled for blank DVDs.

Rule-ID|SV-214816r507075_rule

STIG-ID|AOSX-13-000090

STIG-Legacy|SV-96205

STIG-Legacy|V-81491

Vuln-ID|V-214816

AOSX-13-000095 - The macOS system must be configured with automatic actions disabled for music CDs.

Rule-ID|SV-214817r507075_rule

STIG-ID|AOSX-13-000095

STIG-Legacy|SV-96207

STIG-Legacy|V-81493

Vuln-ID|V-214817

AOSX-13-000100 - The macOS system must be configured with automatic actions disabled for picture CDs.

Rule-ID|SV-214818r507075_rule

STIG-ID|AOSX-13-000100

STIG-Legacy|SV-96211

STIG-Legacy|V-81497

Vuln-ID|V-214818

AOSX-13-000105 - The macOS system must be configured with automatic actions disabled for video DVDs.

Rule-ID|SV-214819r507075_rule

STIG-ID|AOSX-13-000105

STIG-Legacy|SV-96213

STIG-Legacy|V-81499

Vuln-ID|V-214819

AOSX-13-000110 - The macOS system must automatically remove or disable temporary user accounts after 72 hours.

CCI|CCI-000016

Rule-ID|SV-214820r507075_rule

STIG-ID|AOSX-13-000110

STIG-Legacy|SV-96215

STIG-Legacy|V-81501

Vuln-ID|V-214820

AOSX-13-000115 - The macOS system must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.

CCI|CCI-001682

Rule-ID|SV-214821r507075_rule

STIG-ID|AOSX-13-000115

STIG-Legacy|SV-96217

STIG-Legacy|V-81503

Vuln-ID|V-214821

AOSX-13-000120 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions.

CCI|CCI-000018

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002234

CCI|CCI-002884

Rule-ID|SV-214822r507075_rule

STIG-ID|AOSX-13-000120

STIG-Legacy|SV-96219

STIG-Legacy|V-81505

Vuln-ID|V-214822

AOSX-13-000139 - The macOS system must be configured to disable SMB File Sharing unless it is required.

Rule-ID|SV-214823r507075_rule

STIG-ID|AOSX-13-000139

STIG-Legacy|SV-96221

STIG-Legacy|V-81507

Vuln-ID|V-214823

AOSX-13-000140 - The macOS system must be configured to disable Apple File (AFP) Sharing.

Rule-ID|SV-214824r507075_rule

STIG-ID|AOSX-13-000140

STIG-Legacy|SV-96223

STIG-Legacy|V-81509

Vuln-ID|V-214824

AOSX-13-000141 - The macOS system must be configured to disable the Network File System (NFS) daemon unless it is required.

Rule-ID|SV-214825r507075_rule

STIG-ID|AOSX-13-000141

STIG-Legacy|SV-96225

STIG-Legacy|V-81511

Vuln-ID|V-214825

AOSX-13-000142 - The macOS system must be configured to disable the Network File System (NFS) lock daemon unless it is required.

Rule-ID|SV-214826r507075_rule

STIG-ID|AOSX-13-000142

STIG-Legacy|SV-96227

STIG-Legacy|V-81513

Vuln-ID|V-214826

AOSX-13-000143 - The macOS system must be configured to disable the Network File System (NFS) stat daemon unless it is required.

Rule-ID|SV-214827r507075_rule

STIG-ID|AOSX-13-000143

STIG-Legacy|SV-96229

STIG-Legacy|V-81515

Vuln-ID|V-214827

AOSX-13-000155 - The macOS system firewall must be configured with a default-deny policy.

CCI|CCI-002080

Rule-ID|SV-214828r507075_rule

STIG-ID|AOSX-13-000155

STIG-Legacy|SV-96231

STIG-Legacy|V-81517

Vuln-ID|V-214828

AOSX-13-000186 - The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the operating system.

800-53|AC-8

Detections

Analytics

DISA STIG Apple Mac OSX 10.13 v2r1

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.3 Oct 5, 2021 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.2 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 17, 2021 Miscellaneous Metadata updated. References updated.