Skip to content

Apple macOS 13 (Ventura) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must only allow applications with a valid digital signature to run.

    &lt;VulnDiscussion&gt;Gatekeeper settings must be configured correctly to only allow the system to run applications signed with a valid Apple Devel...
    Rule Medium Severity
  • SRG-OS-000379-GPOS-00164

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must be configured with Bluetooth turned off unless approved by the organization.

    &lt;VulnDiscussion&gt;Without protection of communications with wireless peripherals, confidentiality and integrity may be compromised because unpr...
    Rule Low Severity
  • SRG-OS-000364-GPOS-00151

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the guest account.

    &lt;VulnDiscussion&gt;Failure to provide logical access restrictions associated with changes to system configuration may have significant effects o...
    Rule High Severity
  • SRG-OS-000366-GPOS-00153

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must have the security assessment policy subsystem enabled.

    &lt;VulnDiscussion&gt;Any changes to the hardware, software, and/or firmware components of the information system and/or application can potentiall...
    Rule High Severity
  • SRG-OS-000480-GPOS-00229

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must not allow an unattended or automatic logon to the system.

    &lt;VulnDiscussion&gt;Failure to restrict system access to authenticated users negatively impacts operating system security.&lt;/VulnDiscussion&gt;...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules