AOSX-13-000005 - The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.

800-53|AC-11(1)

CAT|III

CCI|CCI-000060

Rule-ID|SV-214802r609363_rule

STIG-ID|AOSX-13-000005

STIG-Legacy|SV-96177

STIG-Legacy|V-81463

Vuln-ID|V-214802

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-bl-corner

CAT|II

Rule-ID|SV-214803r609363_rule

STIG-ID|AOSX-13-000006

STIG-Legacy|SV-96179

STIG-Legacy|V-81465

Vuln-ID|V-214803

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-br-corner

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-tl-corner

AOSX-13-000006 - The macOS system must be configured to disable hot corners - wvous-tr-corner

AOSX-13-000007 - The macOS system must be configured to prevent Apple Watch from terminating a session lock.

800-53|AC-11b.

CCI|CCI-000056

Rule-ID|SV-214804r609363_rule

STIG-ID|AOSX-13-000007

STIG-Legacy|SV-96181

STIG-Legacy|V-81467

Vuln-ID|V-214804

AOSX-13-000010 - The macOS system must initiate a session lock after a 15-minute period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-214805r609363_rule

STIG-ID|AOSX-13-000010

STIG-Legacy|SV-96183

STIG-Legacy|V-81469

Vuln-ID|V-214805

AOSX-13-000020 - The macOS system must retain the session lock until the user reestablishes access using established identification and authentication procedures.

Rule-ID|SV-214806r609363_rule

STIG-ID|AOSX-13-000020

STIG-Legacy|SV-96185

STIG-Legacy|V-81471

Vuln-ID|V-214806

AOSX-13-000025 - The macOS system must initiate the session lock no more than five seconds after a screen saver is started.

Rule-ID|SV-214807r609363_rule

STIG-ID|AOSX-13-000025

STIG-Legacy|SV-96187

STIG-Legacy|V-81473

Vuln-ID|V-214807

AOSX-13-000030 - The macOS system must monitor remote access methods and generate audit records when successful/unsuccessful attempts to access/modify privileges occur.

800-53|AC-17(1)

800-53|AU-12c.

CCI|CCI-000067

CCI|CCI-000172

Rule-ID|SV-214808r609363_rule

STIG-ID|AOSX-13-000030

STIG-Legacy|SV-96189

STIG-Legacy|V-81475

Vuln-ID|V-214808

AOSX-13-000035 - The macOS system must implement DoD-approved encryption to protect the confidentiality and integrity of remote access sessions including transmitted data and data during preparation for transmission.

800-53|AC-17(2)

800-53|SC-8

800-53|SC-8(1)

800-53|SC-8(2)

CAT|I

CCI|CCI-000068

CCI|CCI-002418

CCI|CCI-002420

CCI|CCI-002421

CCI|CCI-002422

Rule-ID|SV-214809r609363_rule

STIG-ID|AOSX-13-000035

STIG-Legacy|SV-96191

STIG-Legacy|V-81477

Vuln-ID|V-214809

AOSX-13-000050 - The macOS system must be configured to disable rshd service.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-214810r609363_rule

STIG-ID|AOSX-13-000050

STIG-Legacy|SV-96193

STIG-Legacy|V-81479

Vuln-ID|V-214810

AOSX-13-000054 - The macOS system must implement approved Ciphers to protect the confidentiality of SSH connections.

800-53|IA-7

800-53|MA-4(6)

800-53|MA-4c.

CCI|CCI-000803

CCI|CCI-000877

CCI|CCI-002890

CCI|CCI-003123

Rule-ID|SV-233625r609363_rule

STIG-ID|AOSX-13-000054

Vuln-ID|V-233625

AOSX-13-000055 - The macOS system must use only Message Authentication Codes (MACs) employing FIPS 140-2 validated cryptographic hash algorithms.

Rule-ID|SV-233626r609363_rule

STIG-ID|AOSX-13-000055

Vuln-ID|V-233626

AOSX-13-000056 - The macOS system must implement an approved Key Exchange Algorithm.

Rule-ID|SV-233627r609363_rule

STIG-ID|AOSX-13-000056

Vuln-ID|V-233627

AOSX-13-000057 - The macOS system must enforce requirements for remote connections to the information

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-237767r648733_rule

STIG-ID|AOSX-13-000057

STIG-Legacy|SV-96195

STIG-Legacy|V-81481

Vuln-ID|V-237767

AOSX-13-000065 - The macOS system must be configured with Bluetooth turned off unless approved by the organization.

Rule-ID|SV-214812r609363_rule

STIG-ID|AOSX-13-000065

STIG-Legacy|SV-96197

STIG-Legacy|V-81483

Vuln-ID|V-214812

AOSX-13-000070 - The macOS system must be configured with Wi-Fi support software disabled.

800-53|AC-18(1)

CCI|CCI-001443

CCI|CCI-001444

Rule-ID|SV-214813r609363_rule

STIG-ID|AOSX-13-000070

STIG-Legacy|SV-96199

STIG-Legacy|V-81485

Vuln-ID|V-214813

AOSX-13-000075 - The macOS system must be configured with Infrared [IR] support disabled.

Rule-ID|SV-214814r609363_rule

STIG-ID|AOSX-13-000075

STIG-Legacy|SV-96201

STIG-Legacy|V-81487

Vuln-ID|V-214814

AOSX-13-000085 - The macOS system must be configured with automatic actions disabled for blank CDs.

Rule-ID|SV-214815r609363_rule

STIG-ID|AOSX-13-000085

STIG-Legacy|SV-96203

STIG-Legacy|V-81489

Vuln-ID|V-214815

AOSX-13-000090 - The macOS system must be configured with automatic actions disabled for blank DVDs.

Rule-ID|SV-214816r609363_rule

STIG-ID|AOSX-13-000090

STIG-Legacy|SV-96205

STIG-Legacy|V-81491

Vuln-ID|V-214816

AOSX-13-000095 - The macOS system must be configured with automatic actions disabled for music CDs.

Rule-ID|SV-214817r609363_rule

STIG-ID|AOSX-13-000095

STIG-Legacy|SV-96207

STIG-Legacy|V-81493

Vuln-ID|V-214817

AOSX-13-000100 - The macOS system must be configured with automatic actions disabled for picture CDs.

Rule-ID|SV-214818r609363_rule

STIG-ID|AOSX-13-000100

STIG-Legacy|SV-96211

STIG-Legacy|V-81497

Vuln-ID|V-214818

AOSX-13-000105 - The macOS system must be configured with automatic actions disabled for video DVDs.

Rule-ID|SV-214819r609363_rule

STIG-ID|AOSX-13-000105

STIG-Legacy|SV-96213

STIG-Legacy|V-81499

Vuln-ID|V-214819

AOSX-13-000110 - The macOS system must automatically remove or disable temporary user accounts after 72 hours.

800-53|AC-2(2)

CCI|CCI-000016

Rule-ID|SV-214820r609363_rule

STIG-ID|AOSX-13-000110

STIG-Legacy|SV-96215

STIG-Legacy|V-81501

Vuln-ID|V-214820

AOSX-13-000115 - The macOS system must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.

CCI|CCI-001682

Rule-ID|SV-214821r609363_rule

STIG-ID|AOSX-13-000115

STIG-Legacy|SV-96217

STIG-Legacy|V-81503

Vuln-ID|V-214821

AOSX-13-000120 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions.

800-53|AC-2(4)

800-53|AC-6(9)

800-53|MA-4(1)(a)

CCI|CCI-000018

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002234

CCI|CCI-002884

Rule-ID|SV-214822r609363_rule

STIG-ID|AOSX-13-000120

STIG-Legacy|SV-96219

STIG-Legacy|V-81505

Vuln-ID|V-214822

AOSX-13-000139 - The macOS system must be configured to disable SMB File Sharing unless it is required.

Rule-ID|SV-214823r609363_rule

STIG-ID|AOSX-13-000139

STIG-Legacy|SV-96221

STIG-Legacy|V-81507

Vuln-ID|V-214823

AOSX-13-000140 - The macOS system must be configured to disable Apple File (AFP) Sharing.

Rule-ID|SV-214824r609363_rule

STIG-ID|AOSX-13-000140

STIG-Legacy|SV-96223

STIG-Legacy|V-81509

Vuln-ID|V-214824

Detections

Analytics

Revision 1.4

Sep 19, 2023

Functional Update

Miscellaneous