Detections
Analytics
2.7.1 Ensure Screen Saver Hot Corners Are Secure For Current User
Information
Hot Corners can be configured to disable the screen saver by moving the mouse cursor to a corner of the screen. This can only be accomplished by the current user, so that is the only user that needs to be audited.Setting a hot corner to disable the screen saver poses a potential security risk since an unauthorized person could use this to bypass the login screen and gain access to the system.
Solution
Graphical Method:Perform the following steps to ensure that a Hot Corner is not set to Disable Screen Saver:
- Open System Settings
- Select Desktop & Dock
- Select Hot Corners
- Set and hot corner that is set to Disable Screen Saver to a setting that matches your organizational requirements
Terminal Method:
Run the following command to ensure that hot corners cannot disable the screen saver:
% /usr/bin/sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-bl-corner 2>/dev/null
% /usr/bin/sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tl-corner 2>/dev/null
% /usr/bin/sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tr-corner 2>/dev/null
% /usr/bin/sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-br-corner 2>/dev/null
Note: To find out the current user name, run the command /usr/bin/defaults read /Library/Preferences/com.apple.loginwindow lastUserName
Impact:
There should be no impact on the user.
See Also
Item Details
Audit Name: CIS Apple macOS 14.0 Sonoma v3.1.0 L1
Category: ACCESS CONTROL
References: 800-53|AC-2(5), 800-53|AC-11, 800-53|AC-11(1), 800-53|AC-12, CSCv7|16.11
Plugin: Unix
Control ID: 528b15235ba08128141a4c6faf3e47c948c27b0c33250492713864ca16e89578