Item Search

NameAudit NamePluginCategory
APPL-15-000023 - The macOS system must display a policy banner at remote login.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000030 - The macOS system must configure audit log files to not contain access control lists (ACLs).DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-000051 - The macOS system must configure SSHD ClientAliveInterval to 900.DISA Apple macOS 15 Sequoia STIG v1r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-000052 - The macOS system must configure SSHD ClientAliveCountMax to 1.DISA Apple macOS 15 Sequoia STIG v1r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-000070 - The macOS system must enforce screen saver timeout.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000130 - The macOS system must configure SSHD unused connection timeout to 900.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-001012 - The macOS system must configure audit log files to be owned by root.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001016 - The macOS system must configure audit log files to mode 440 or less permissive.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001020 - The macOS system must be configured to audit all deletions of object attributes.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-15-001031 - The macOS system must configure audit failure notification.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001120 - The macOS system must configure audit_control owner to root.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001130 - The macOS system must configure audit_control owner to mode 440 or less permissive.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-002001 - The macOS system must disable Server Message Block (SMB) sharing.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-002006 - The macOS system must disable Unix-to-Unix Copy Protocol (UUCP) service.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-002008 - The macOS system must disable the built-in web server.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-002040 - The macOS system must disable iCloud Keychain Sync.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002080 - The macOS system must disable Airplay Receiver.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-15-002090 - The macOS system must disable TouchID for unlocking the device.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-002100 - The macOS system must disable Media Sharing.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-002120 - The macOS system must disable AppleID and internet Account Modification.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002160 - The macOS system must disable iCloud Game Center.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002250 - The macOS system must disable Remote Management.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-003011 - The macOS system must require that passwords contain a minimum of one special character.DISA Apple macOS 15 Sequoia STIG v1r8Unix

IDENTIFICATION AND AUTHENTICATION

APPL-15-005080 - The macOS system must prohibit user installation of software into /users/.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-005090 - The macOS system must authorize USB devices before allowing connection.DISA Apple macOS 15 Sequoia STIG v1r8Unix

IDENTIFICATION AND AUTHENTICATION

APPL-15-005110 - The macOS system must enforce enrollment in Mobile Device Management (MDM).DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-005140 - The macOS system must disable Genmoji.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-26-000023 - The macOS system must display a policy banner at remote login.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000025 - The macOS system must display the Standard Mandatory DoW Notice and Consent Banner at the login window.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000030 - The macOS system must configure audit log files to not contain access control lists (ACLs).DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-000120 - The macOS system must configure SSHD channel timeout to 900.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-26-000130 - The macOS system must configure SSHD unused connection timeout to 900.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-26-000180 - The macOS system must enable the time synchronization daemon.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-001001 - The macOS system must be configured to audit all administrative action events.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-26-001015 - The macOS system must configure the audit log folders group to wheel.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-001022 - The macOS system must be configured to audit all failed read actions on the system.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-26-001023 - The macOS system must be configured to audit all failed write actions on the system.DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-26-002007 - The macOS system must disable Internet Sharing.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002009 - The macOS system must disable AirDrop.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-26-002040 - The macOS system must disable iCloud Keychain Sync.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002069 - The macOS system must require an administrator password to modify systemwide preferences.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002080 - The macOS system must disable Airplay Receiver.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-26-002090 - The macOS system must disable TouchID for unlocking the device.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002100 - The macOS system must disable Media Sharing.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-002140 - The macOS system must disable Content Caching service.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002260 - The macOS system must disable the Bluetooth System Settings pane.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-003051 - The macOS system must enforce multifactor authentication for the su command.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-003070 - The macOS system must set minimum password lifetime to 24 hours.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-004001 - The macOS system must configure Apple System Log (ASL) files owned by root and group to wheel.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-26-005054 - The macOS system must disable the TouchID prompt during Setup Assistant.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT