Item Search

NameAudit NamePluginCategory
APPL-14-000025 - The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000053 - The macOS system must set Login Grace Time to 30.DISA Apple macOS 14 Sonoma STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-14-000060 - The macOS system must set account lockout time to 15 minutes.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000070 - The macOS system must enforce screen saver timeout.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000120 - The macOS system must configure SSHD Channel Timeout to 900.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-14-000160 - The macOS system must enforce auto logout after 86400 seconds of inactivity.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000170 - The macOS system must be configured to use an authorized time server.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001003 - The macOS system must enable security auditing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, MAINTENANCE

APPL-14-001010 - The macOS system must configure system to shut down upon audit failure.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001012 - The macOS system must configure audit log files to be owned by root.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001015 - The macOS system must configure audit log folders group to wheel.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001016 - The macOS system must configure audit log files to mode 440 or less permissive.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001031 - The macOS system must configure audit failure notification.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001100 - The macOS system must disable root logon for SSH.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

APPL-14-001110 - The macOS system must configure audit_control group to wheel.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001120 - The macOS system must configure audit_control owner to root.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001140 - The macOS system must configure audit_control to not contain access control lists.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-002001 - The macOS system must disable Server Message Block sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002003 - The macOS system must disable Network File System service.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002008 - The macOS system must disable the built-in web server.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002009 - The macOS system must disable AirDrop.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-14-002020 - The macOS system must disable Siri.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002037 - The macOS system must disable iCloud Storage Setup during Setup Assistant.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002090 - The macOS system must disable TouchID for unlocking the device.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002100 - The macOS system must disable Media Sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002110 - The macOS system must disable Bluetooth sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-14-002140 - The macOS system must disable content caching service.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002190 - The macOS system must disable password autofill.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002200 - The macOS system must disable personalized advertising.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002240 - The macOS system must disable Printer Sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-003012 - The macOS system must disable password hints.DISA Apple macOS 14 Sonoma STIG v2r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-14-004040 - The macOS system must configure system log files to mode 640 or less permissive.DISA Apple macOS 14 Sonoma STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-14-004050 - The macOS system must configure install.log retention to 365.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-005001 - The macOS system must ensure System Integrity Protection is enabled.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

APPL-14-005050 - The macOS system must enable the application firewall.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-005058 - The macOS system must disable Handoff.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-15-000003 - The macOS system must enforce session lock no more than five seconds after screen saver is started.DISA Apple macOS 15 Sequoia STIG v1r7Unix

ACCESS CONTROL

APPL-15-000012 - The macOS system must automatically remove or disable temporary or emergency user accounts within 72 hours.DISA Apple macOS 15 Sequoia STIG v1r7Unix

ACCESS CONTROL

APPL-15-000025 - The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.DISA Apple macOS 15 Sequoia STIG v1r7Unix

ACCESS CONTROL

APPL-15-000051 - The macOS system must configure SSHD ClientAliveInterval to 900.DISA Apple macOS 15 Sequoia STIG v1r7Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-000052 - The macOS system must configure SSHD ClientAliveCountMax to 1.DISA Apple macOS 15 Sequoia STIG v1r7Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-000090 - The macOS system must disable login to other users' active and locked sessions.DISA Apple macOS 15 Sequoia STIG v1r7Unix

IDENTIFICATION AND AUTHENTICATION

APPL-15-001014 - The macOS system must configure the audit log files group to wheel.DISA Apple macOS 15 Sequoia STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001023 - The macOS system must be configured to audit all failed write actions on the system.DISA Apple macOS 15 Sequoia STIG v1r7Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-15-001029 - The macOS system must configure audit retention to seven days.DISA Apple macOS 15 Sequoia STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001030 - The macOS system must configure audit capacity warning.DISA Apple macOS 15 Sequoia STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001130 - The macOS system must configure audit_control owner to mode 440 or less permissive.DISA Apple macOS 15 Sequoia STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001150 - The macOS system must disable password authentication for SSH.DISA Apple macOS 15 Sequoia STIG v1r7Unix

IDENTIFICATION AND AUTHENTICATION, MAINTENANCE

APPL-15-002004 - The macOS system must disable Location Services.DISA Apple macOS 15 Sequoia STIG v1r7Unix

CONFIGURATION MANAGEMENT

APPL-15-002009 - The macOS system must disable AirDrop.DISA Apple macOS 15 Sequoia STIG v1r7Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT