7.16 Unified logging

Information

Starting with macOS 10.12 Apple introduced unified logging. This capability replaces the previous logging methodology with centralized system wide common controls. A full explanation of macOS logging behavior is beyond the scope of this Benchmark. These changes impact previous logging controls from macOS Benchmarks. At this point many of the syslog controls have been or are being removed since the old logging methods have been deprecated. Controls that still appear useful will be retained. Some legacy controls have been removed for this release.

More info

https://developer.apple.com/documentation/os/logging

https://eclecticlight.co/2018/03/19/macos-unified-log-1-why-what-and-how/

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

None

See Also

https://workbench.cisecurity.org/files/3092

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-6, CSCv7|6

Plugin: Unix

Control ID: 3e5810b144b0e89de50cd6efec773fdbae6dd5689d9bd769816335742a7a4777