Detections
Analytics

Big Sur - Disable Proximity Based Password Sharing Requests

Information

Proximity based password sharing requests _MUST_ be disabled.

The default behavior of macOS is to allow users to request passwords from other known devices (macOS and iOS). This feature _MUST_ be disabled to prevent passwords from being shared.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.applicationaccess:
 allowPasswordProximityRequests:
 False

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5, CCE|CCE-85352-3

Plugin: Unix

Control ID: d15d9eb7ec2169e727385dedcdfbebb145ad13414d43299cc4c30ee04b13b3de