Apple macOS 14 (Sonoma) Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The macOS system must disable Remote Management.
<VulnDiscussion>Remote Management must be disabled.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives>...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The macOS system must disable the Bluetooth system settings pane.
<VulnDiscussion>The Bluetooth System Setting pane must be disabled to prevent access to the Bluetooth configuration.</VulnDiscussion>&l...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
<GroupDescription></GroupDescription>Group -
The macOS system must disable the iCloud Freeform services.
<VulnDiscussion>The macOS built-in Freeform.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provi...Rule Medium Severity -
SRG-OS-000403-GPOS-00182
<GroupDescription></GroupDescription>Group -
The macOS system must require passwords contain a minimum of one numeric character.
<VulnDiscussion>The macOS must be configured to require at least one numeric character be used when a password is created. This rule enforce...Rule Medium Severity -
SRG-OS-000076-GPOS-00044
<GroupDescription></GroupDescription>Group -
The macOS system must restrict maximum password lifetime to 60 days.
<VulnDiscussion>The macOS must be configured to enforce a maximum password lifetime limit of at least 60 days. This rule ensures that users ...Rule Medium Severity -
SRG-OS-000078-GPOS-00046
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules