AOSX-12-000005 - The OS X system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.

800-53|AC-11

CAT|III

CCI|CCI-000060

Rule-ID|SV-90633r1_rule

STIG-ID|AOSX-12-000005

Vuln-ID|V-75945

AOSX-12-000006 - The OS X system must be configured to disable hot corners - wvous-bl-corner

CAT|II

Rule-ID|SV-90635r2_rule

STIG-ID|AOSX-12-000006

Vuln-ID|V-75947

AOSX-12-000006 - The OS X system must be configured to disable hot corners - wvous-br-corner

AOSX-12-000006 - The OS X system must be configured to disable hot corners - wvous-tl-corner

AOSX-12-000006 - The OS X system must be configured to disable hot corners - wvous-tr-corner

AOSX-12-000007 - The OS X system must be configured to prevent Apple Watch from terminating a session lock.

800-53|CM-7

CCI|CCI-000056

Rule-ID|SV-90637r1_rule

STIG-ID|AOSX-12-000007

Vuln-ID|V-75949

AOSX-12-000010 - The OS X system must initiate a session lock after a 15-minute period of inactivity.

CCI|CCI-000057

CSCv6|16.5

Rule-ID|SV-90639r1_rule

STIG-ID|AOSX-12-000010

Vuln-ID|V-75951

AOSX-12-000020 - The OS X system must retain the session lock until the user reestablishes access using established identification and authentication procedures.

Rule-ID|SV-90641r1_rule

STIG-ID|AOSX-12-000020

Vuln-ID|V-75953

AOSX-12-000025 - The OS X system must initiate the session lock no more than five seconds after a screen saver is started.

Rule-ID|SV-90643r1_rule

STIG-ID|AOSX-12-000025

Vuln-ID|V-75955

AOSX-12-000030 - The OS X system must monitor remote access methods and generate audit records when successful/unsuccessful attempts to access/modify privileges occur.

800-53|AU-12

CCI|CCI-000067

CCI|CCI-000172

Rule-ID|SV-90645r1_rule

STIG-ID|AOSX-12-000030

Vuln-ID|V-75957

AOSX-12-000035 - The OS X system must implement DoD-approved encryption to protect the confidentiality and integrity of remote access sessions including transmitted data and data during preparation for transmission.

CAT|I

CCI|CCI-000068

CCI|CCI-002418

CCI|CCI-002420

CCI|CCI-002421

CCI|CCI-002422

Rule-ID|SV-90647r1_rule

STIG-ID|AOSX-12-000035

Vuln-ID|V-75959

AOSX-12-000050 - The OS X system must be configured to disable rshd service.

CCI|CCI-000381

Rule-ID|SV-90649r1_rule

STIG-ID|AOSX-12-000050

Vuln-ID|V-75961

AOSX-12-000055 - The OS X system must enforce requirements for remote connections to the information system.

CCI|CCI-000366

Rule-ID|SV-90651r1_rule

STIG-ID|AOSX-12-000055

Vuln-ID|V-75963

AOSX-12-000065 - The OS X system must be configured with Bluetooth turned off unless approved by the organization.

Rule-ID|SV-90653r1_rule

STIG-ID|AOSX-12-000065

Vuln-ID|V-75965

AOSX-12-000070 - The OS X system must be configured with Wi-Fi support software disabled.

CCI|CCI-001443

CCI|CCI-001444

CSCv6|9.1

Rule-ID|SV-90655r1_rule

STIG-ID|AOSX-12-000070

Vuln-ID|V-75967

AOSX-12-000075 - The OS X system must be configured with Infrared [IR] support disabled.

800-53|CM-6

CSCv6|3.1

Rule-ID|SV-90657r1_rule

STIG-ID|AOSX-12-000075

Vuln-ID|V-75969

AOSX-12-000085 - The OS X system must be configured with automatic actions disabled for blank CDs.

Rule-ID|SV-90659r1_rule

STIG-ID|AOSX-12-000085

Vuln-ID|V-75971

AOSX-12-000090 - The OS X system must be configured with automatic actions disabled for blank DVDs.

Rule-ID|SV-90661r1_rule

STIG-ID|AOSX-12-000090

Vuln-ID|V-75973

AOSX-12-000095 - The OS X system must be configured with automatic actions disabled for music CDs.

Rule-ID|SV-90663r1_rule

STIG-ID|AOSX-12-000095

Vuln-ID|V-75975

AOSX-12-000100 - The OS X system must be configured with automatic actions disabled for picture CDs.

Rule-ID|SV-90665r1_rule

STIG-ID|AOSX-12-000100

Vuln-ID|V-75977

AOSX-12-000105 - The OS X system must be configured with automatic actions disabled for video DVDs.

Rule-ID|SV-90667r1_rule

STIG-ID|AOSX-12-000105

Vuln-ID|V-75979

AOSX-12-000110 - The OS X system must automatically remove or disable temporary user accounts after 72 hours.

CCI|CCI-000016

Rule-ID|SV-90669r1_rule

STIG-ID|AOSX-12-000110

Vuln-ID|V-75981

AOSX-12-000115 - The OS X system must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.

CCI|CCI-001682

Rule-ID|SV-90671r1_rule

STIG-ID|AOSX-12-000115

Vuln-ID|V-75983

AOSX-12-000120 - The OS X system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions.

CCI|CCI-000018

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002234

CCI|CCI-002884

Rule-ID|SV-90673r1_rule

STIG-ID|AOSX-12-000120

Vuln-ID|V-75985

AOSX-12-000139 - The OS X system must be configured to disable SMB File Sharing unless it is required.

Rule-ID|SV-90675r1_rule

STIG-ID|AOSX-12-000139

Vuln-ID|V-75987

AOSX-12-000140 - The OS X system must be configured to disable Apple File (AFP) Sharing.

Rule-ID|SV-90677r1_rule

STIG-ID|AOSX-12-000140

Vuln-ID|V-75989

AOSX-12-000141 - The OS X system must be configured to disable the Network File System (NFS) daemon unless it is required.

Rule-ID|SV-90679r1_rule

STIG-ID|AOSX-12-000141

Vuln-ID|V-75991

AOSX-12-000142 - The OS X system must be configured to disable the Network File System (NFS) lock daemon unless it is required.

Rule-ID|SV-90681r1_rule

STIG-ID|AOSX-12-000142

Vuln-ID|V-75993

AOSX-12-000143 - The OS X system must be configured to disable the Network File System (NFS) stat daemon unless it is required.

Rule-ID|SV-90683r1_rule

STIG-ID|AOSX-12-000143

Vuln-ID|V-75995

AOSX-12-000155 - The OS X system firewall must be configured with a default-deny policy.

CCI|CCI-002080

Rule-ID|SV-90685r1_rule

STIG-ID|AOSX-12-000155

Vuln-ID|V-75997

AOSX-12-000186 - The OS X system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the operating system.

800-53|AC-8

CCI|CCI-000048

Rule-ID|SV-90687r1_rule

STIG-ID|AOSX-12-000186

Vuln-ID|V-75999

AOSX-12-000187 - The OS X system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system via SSH - SSH.

CCI|CCI-000050

Rule-ID|SV-90689r1_rule

STIG-ID|AOSX-12-000187

Vuln-ID|V-76001

AOSX-12-000195 - The OS X system must be configured so that any connection to the system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system - 'Banner file exists'

CCI|CCI-001384

CCI|CCI-001385

CCI|CCI-001386

CCI|CCI-001387

CCI|CCI-001388

Rule-ID|SV-90691r1_rule

STIG-ID|AOSX-12-000195

Vuln-ID|V-76003

AOSX-12-000195 - The OS X system must be configured so that any connection to the system must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system - 'Banner file text'

AOSX-12-000200 - The OS X system must generate audit records for DoD-defined events such as successful/unsuccessful logon attempts, successful/unsuccessful direct access attempts, starting and ending time for user access, and concurrent logons to the same account from different sources.

Rule-ID|SV-90693r1_rule

STIG-ID|AOSX-12-000200

Vuln-ID|V-76005

AOSX-12-000230 - The OS X system must initiate session audits at system startup.

800-53|AU-14

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000159

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-001889

CCI|CCI-001890

CCI|CCI-002130

Rule-ID|SV-90695r1_rule

STIG-ID|AOSX-12-000230

Vuln-ID|V-76007

AOSX-12-000240 - The OS X system must enable System Integrity Protection.

800-53|SI-7

CCI|CCI-000154

CCI|CCI-000158

CCI|CCI-000169

CCI|CCI-001090

CCI|CCI-001493

CCI|CCI-001494

CCI|CCI-001495

CCI|CCI-001499

CCI|CCI-001875

CCI|CCI-001876

CCI|CCI-001877

CCI|CCI-001878

CCI|CCI-001879

Detections

Analytics

DISA STIG Apple Mac OSX 10.12 v1r6

Warning! Audit Deprecated

Audit Details

Audit Changelog

No revisions found