AOSX-13-000005 - The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.

800-53|AC-11(1)

CAT|III

CCI|CCI-000060

Rule-ID|SV-214802r609363_rule

STIG-ID|AOSX-13-000005

STIG-Legacy|SV-96177

STIG-Legacy|V-81463

Vuln-ID|V-214802

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-bl-corner

CAT|II

Rule-ID|SV-214803r609363_rule

STIG-ID|AOSX-13-000006

STIG-Legacy|SV-96179

STIG-Legacy|V-81465

Vuln-ID|V-214803

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-br-corner

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-tl-corner

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-tr-corner

AOSX-13-000007 - The macOS system must be configured to prevent Apple Watch from terminating a session lock.

800-53|AC-11b.

CCI|CCI-000056

Rule-ID|SV-214804r609363_rule

STIG-ID|AOSX-13-000007

STIG-Legacy|SV-96181

STIG-Legacy|V-81467

Vuln-ID|V-214804

AOSX-13-000010 - The macOS system must initiate a session lock after a 15-minute period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-214805r609363_rule

STIG-ID|AOSX-13-000010

STIG-Legacy|SV-96183

STIG-Legacy|V-81469

Vuln-ID|V-214805

AOSX-13-000020 - The macOS system must retain the session lock until the user reestablishes access using established identification and authentication procedures.

Rule-ID|SV-214806r609363_rule

STIG-ID|AOSX-13-000020

STIG-Legacy|SV-96185

STIG-Legacy|V-81471

Vuln-ID|V-214806

AOSX-13-000025 - The macOS system must initiate the session lock no more than five seconds after a screen saver is started.

Rule-ID|SV-214807r609363_rule

STIG-ID|AOSX-13-000025

STIG-Legacy|SV-96187

STIG-Legacy|V-81473

Vuln-ID|V-214807

AOSX-13-000030 - The macOS system must monitor remote access methods and generate audit records when successful/unsuccessful attempts to access/modify privileges occur.

800-53|AC-17(1)

800-53|AU-12c.

CCI|CCI-000067

CCI|CCI-000172

Rule-ID|SV-214808r609363_rule

STIG-ID|AOSX-13-000030

STIG-Legacy|SV-96189

STIG-Legacy|V-81475

Vuln-ID|V-214808

AOSX-13-000035 - The macOS system must implement DoD-approved encryption to protect the confidentiality and integrity of remote access sessions including transmitted data and data during preparation for transmission.

800-53|AC-17(2)

800-53|SC-8

800-53|SC-8(1)

800-53|SC-8(2)

CAT|I

CCI|CCI-000068

CCI|CCI-002418

CCI|CCI-002420

CCI|CCI-002421

CCI|CCI-002422

Rule-ID|SV-214809r609363_rule

STIG-ID|AOSX-13-000035

STIG-Legacy|SV-96191

STIG-Legacy|V-81477

Vuln-ID|V-214809

AOSX-13-000050 - The macOS system must be configured to disable rshd service.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-214810r609363_rule

STIG-ID|AOSX-13-000050

STIG-Legacy|SV-96193

STIG-Legacy|V-81479

Vuln-ID|V-214810

AOSX-13-000054 - The macOS system must implement approved Ciphers to protect the confidentiality of SSH connections.

800-53|IA-7

800-53|MA-4(6)

800-53|MA-4c.

CCI|CCI-000803

CCI|CCI-000877

CCI|CCI-002890

CCI|CCI-003123

Rule-ID|SV-233625r609363_rule

STIG-ID|AOSX-13-000054

Vuln-ID|V-233625

AOSX-13-000055 - The macOS system must use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms.

Rule-ID|SV-233626r609363_rule

STIG-ID|AOSX-13-000055

Vuln-ID|V-233626

AOSX-13-000056 - The macOS system must implement an approved Key Exchange Algorithm.

Rule-ID|SV-233627r609363_rule

STIG-ID|AOSX-13-000056

Vuln-ID|V-233627

AOSX-13-000057 - The macOS system must enforce requirements for remote connections to the information

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-237767r648733_rule

STIG-ID|AOSX-13-000057

STIG-Legacy|SV-96195

STIG-Legacy|V-81481

Vuln-ID|V-237767

AOSX-13-000065 - The macOS system must be configured with Bluetooth turned off unless approved by the organization.

Rule-ID|SV-214812r609363_rule

STIG-ID|AOSX-13-000065

STIG-Legacy|SV-96197

STIG-Legacy|V-81483

Vuln-ID|V-214812

AOSX-13-000070 - The macOS system must be configured with Wi-Fi support software disabled.

800-53|AC-18(1)

CCI|CCI-001443

CCI|CCI-001444

Rule-ID|SV-214813r609363_rule

STIG-ID|AOSX-13-000070

STIG-Legacy|SV-96199

STIG-Legacy|V-81485

Vuln-ID|V-214813

AOSX-13-000075 - The macOS system must be configured with Infrared [IR] support disabled.

Rule-ID|SV-214814r609363_rule

STIG-ID|AOSX-13-000075

STIG-Legacy|SV-96201

STIG-Legacy|V-81487

Vuln-ID|V-214814

AOSX-13-000085 - The macOS system must be configured with automatic actions disabled for blank CDs.

Rule-ID|SV-214815r609363_rule

STIG-ID|AOSX-13-000085

STIG-Legacy|SV-96203

STIG-Legacy|V-81489

Vuln-ID|V-214815

AOSX-13-000090 - The macOS system must be configured with automatic actions disabled for blank DVDs.

Rule-ID|SV-214816r609363_rule

STIG-ID|AOSX-13-000090

STIG-Legacy|SV-96205

STIG-Legacy|V-81491

Vuln-ID|V-214816

AOSX-13-000095 - The macOS system must be configured with automatic actions disabled for music CDs.

Rule-ID|SV-214817r609363_rule

STIG-ID|AOSX-13-000095

STIG-Legacy|SV-96207

STIG-Legacy|V-81493

Vuln-ID|V-214817

AOSX-13-000100 - The macOS system must be configured with automatic actions disabled for picture CDs.

Rule-ID|SV-214818r609363_rule

STIG-ID|AOSX-13-000100

STIG-Legacy|SV-96211

STIG-Legacy|V-81497

Vuln-ID|V-214818

AOSX-13-000105 - The macOS system must be configured with automatic actions disabled for video DVDs.

Rule-ID|SV-214819r609363_rule

STIG-ID|AOSX-13-000105

STIG-Legacy|SV-96213

STIG-Legacy|V-81499

Vuln-ID|V-214819

AOSX-13-000110 - The macOS system must automatically remove or disable temporary user accounts after 72 hours.

800-53|AC-2(2)

CCI|CCI-000016

Rule-ID|SV-214820r609363_rule

STIG-ID|AOSX-13-000110

STIG-Legacy|SV-96215

STIG-Legacy|V-81501

Vuln-ID|V-214820

AOSX-13-000115 - The macOS system must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.

CCI|CCI-001682

Rule-ID|SV-214821r609363_rule

STIG-ID|AOSX-13-000115

STIG-Legacy|SV-96217

STIG-Legacy|V-81503

Vuln-ID|V-214821

AOSX-13-000120 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions.

800-53|AC-2(4)

800-53|AC-6(9)

800-53|MA-4(1)(a)

CCI|CCI-000018

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002234

CCI|CCI-002884

Rule-ID|SV-214822r609363_rule

STIG-ID|AOSX-13-000120

STIG-Legacy|SV-96219

STIG-Legacy|V-81505

Vuln-ID|V-214822

AOSX-13-000139 - The macOS system must be configured to disable SMB File Sharing unless it is required.

Rule-ID|SV-214823r609363_rule

STIG-ID|AOSX-13-000139

STIG-Legacy|SV-96221

STIG-Legacy|V-81507

Vuln-ID|V-214823

AOSX-13-000140 - The macOS system must be configured to disable Apple File (AFP) Sharing.

Rule-ID|SV-214824r609363_rule

STIG-ID|AOSX-13-000140

STIG-Legacy|SV-96223

STIG-Legacy|V-81509

Vuln-ID|V-214824

Detections

Analytics

DISA STIG Apple Mac OSX 10.13 v2r5

Audit Details

File Details

Audit Changelog

Revision 1.4

Functional Update

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous


Revision 1.4 Sep 19, 2023 Functional Update AOSX-13-001110 - The macOS system must be configured with all public directories owned by root or an application account. AOSX-13-001120 - The macOS system must be configured with the sticky bit set on all public directories. AOSX-13-001130 - The macOS system must be configured so that users do not have Apple IDs signed into iCloud. AOSX-13-001145 - All setuid executables on the macOS system must be documented. Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.3 Apr 12, 2023 Miscellaneous Metadata updated. Platform check updated. Variables updated.
Revision 1.2 Mar 7, 2023 Miscellaneous Metadata updated. References updated. Variables updated.
Revision 1.1 Dec 7, 2022 Miscellaneous Metadata updated.
Revision 1.0 May 27, 2022 Miscellaneous Metadata updated.

Detections

Analytics

DISA STIG Apple Mac OSX 10.13 v2r5 Download File

Audit Details

File Details

Audit Changelog

Revision 1.4

Functional Update

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous

DISA STIG Apple Mac OSX 10.13 v2r5