Catalina - FileVault Authorized Users

Information

macOS _MUST_ be configured to only allow authorized users to unlock FileVault upon startup.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Remove the user that is not authorized to unlock FileVault using the fdesetup command.

[source,bash]
----
/usr/bin/fdesetup remove -user NOT_AUTHORIZED_USERNAME
----

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2(11), CCE|CCE-84932-3, STIG-ID|AOSX-15-000032

Plugin: Unix

Control ID: 651be20244291587c2393a1b6b263a9f4a903cd630a97dee2b289e5814671a12