5.9 Require a password to wake the computer from sleep or screen saver

Information

Sleep and screensaver modes are low power modes that reduces electrical consumption while the system is not in use. Prompting for a password when waking from sleep or screensaver mode mitigates the threat of an unauthorized person gaining access to a system in the user's absence.

Solution

Perform the following to implement the prescribed state: Run the following command in Terminal: The current user will need to log off and on for changes to take effect. defaults write com.apple.screensaver askForPassword -int 1 The current user will need to log off and on for changes to take effect. Impact: Without a screenlock in place anyone with physical access to the computer would be logged in and able to use the active users session.

See Also

https://workbench.cisecurity.org/files/299

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11

Plugin: Unix

Control ID: 5a8b967379fed07b5d1168dcead9b4d339ce2b8a425f0fbe944e98f3c74da3cf