Detections
Analytics

1.5 APPL-14-000009

Information

The macOS system must prevent AdminHostInfo from being available at LoginWindow.

GROUP ID: V-259423RULE ID: SV-259423r958402

The system must be configured to not display sensitive information at the LoginWindow. The key AdminHostInfo when configured will allow the HostName, IP Address, and operating system version and build to be displayed.

Solution

Configure the macOS system to prevent AdminHostInfo from being available at LoginWindow by installing the "com.apple.loginwindow" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/24070

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11a., CAT|II, CCI|CCI-000057, Rule-ID|SV-259423r958402_rule, STIG-ID|APPL-14-000009, Vuln-ID|V-259423

Plugin: Unix

Control ID: ddd7eed31f7b12a6d4ac691e7b498a34d2b8d7b5f1192a2e2bbc62a4e386a400