2.10 Ensure Secure Keyboard Entry terminal.app is Enabled

Information

Secure Keyboard Entry prevents other applications on the system and/or network from detecting and recording what is typed into Terminal.

Rationale:

Enabling Secure Keyboard Entry minimizes the risk of a key logger from detecting what is entered in Terminal.

Solution

Perform the following to enable secure keyboard entries in Terminal:
Graphical Method:

Open Terminal

Select Terminal

Select Secure Keyboard Entry

Terminal Method:

$ sudo -u <username> /usr/bin/defaults write -app Terminal SecureKeyboardEntry -bool true

example:

$ sudo -u firstuser /usr/bin/defaults write -app Terminal SecureKeyboardEntry -bool true

Profile Method:

Create or edit a configuration profile with the PayLoadType of com.apple.Terminal

Add the key SecureKeyboardEntry

Set the key to <true/>

See Also

https://workbench.cisecurity.org/files/3569

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|4.1, CSCv7|5.1, CSCv7|9.2

Plugin: Unix

Control ID: bbea7b59bbc8af0756616d599b2c92fc88fb0ee0b31a2b0da0555c7e25906579