Detections
Analytics

1.6 APPL-15-000009

Information

The macOS system must prevent AdminHostInfo from being available at LoginWindow.

GROUP ID: V-268425
RULE ID: SV-268425r1034215

The system must be configured to not display sensitive information at the LoginWindow. The key AdminHostInfo, when configured, will allow the HostName, IP Address, and operating system version and build to be displayed.

Solution

Configure the macOS system to prevent AdminHostInfo from being available at LoginWindow by installing the "com.apple.loginwindow" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/23761

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11(1), CCI|CCI-000060, Rule-ID|SV-268425r1034215_rule, STIG-ID|APPL-15-000009, Vuln-ID|V-268425

Plugin: Unix

Control ID: b139383cb1a39744c838d772cb87ddea8cfca4701e39f947e3500b9c711688be