Detections
Analytics

1.8 APPL-15-000022

Information

The macOS system must limit consecutive failed login attempts to three.

GROUP ID: V-268428
RULE ID: SV-268428r1034224

The macOS must be configured to limit the number of failed login attempts to a maximum of three. When the maximum number of failed attempts is reached, the account must be locked for a period of time.

This rule protects against malicious users attempting to gain access to the system via brute-force hacking methods.

Satisfies: SRG-OS-000021-GPOS-00005, SRG-OS-000329-GPOS-00128

Solution

Configure the macOS system to limit consecutive failed login attempts to three by installing the "com.apple.mobiledevice.passwordpolicy" configuration profile or by a directory service.

See Also

https://workbench.cisecurity.org/benchmarks/23761

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-7a., 800-53|AC-7b., CCI|CCI-000044, CCI|CCI-002238, Rule-ID|SV-268428r1034224_rule, STIG-ID|APPL-15-000022, Vuln-ID|V-268428

Plugin: Unix

Control ID: 72df1b56f9b7fec82f4788525c8b89c04d0f8d331c7e2aa300c9d5d5a9caccc2