Detections
Analytics
APPL-15-000100 - The macOS system must disable root login.
Information
To assure individual accountability and prevent unauthorized access, logging in as root at the login window must be disabled.The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator, and administrator users must never log in directly as root.
Satisfies: SRG-OS-000104-GPOS-00051, SRG-OS-000109-GPOS-00056, SRG-OS-000364-GPOS-00151
Solution
Configure the macOS system to disable root login with the following command:/usr/bin/dscl . -create /Users/root UserShell /usr/bin/false
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_15_V1R1_STIG.zip
Item Details
Audit Name: DISA Apple macOS 15 (Sequoia) STIG v1r1
Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION
References: 800-53|CM-5(1), 800-53|IA-2, CAT|II, CCI|CCI-000764, CCI|CCI-001813, CCI|CCI-004045, Rule-ID|SV-268443r1034269_rule, STIG-ID|APPL-15-000100, Vuln-ID|V-268443
Plugin: Unix
Control ID: 27ff091f5db4b17b1113255fb29b44ec61c20456c42cdf386c795dd5267252b6