Apple macOS 14 (Sonoma) Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The macOS system must require a minimum password length of 14 characters.
<VulnDiscussion>The macOS must be configured to require a minimum of 14 characters be used when a password is created. This rule enforces pa...Rule Medium Severity -
SRG-OS-000266-GPOS-00101
<GroupDescription></GroupDescription>Group -
The macOS system must require passwords contain a minimum of one special character.
<VulnDiscussion>The macOS must be configured to require at least one special character be used when a password is created. Special character...Rule Medium Severity -
SRG-OS-000079-GPOS-00047
<GroupDescription></GroupDescription>Group -
The macOS system must disable password hints.
<VulnDiscussion>Password hints must be disabled. Password hints leak information about passwords that are currently in use and can lead to l...Rule Medium Severity -
SRG-OS-000480-GPOS-00227
<GroupDescription></GroupDescription>Group -
The macOS system must enable firmware password.
<VulnDiscussion>A firmware password must be enabled and set. Single user mode, recovery mode, the Startup Manager, and several other tools a...Rule Medium Severity -
SRG-OS-000079-GPOS-00047
<GroupDescription></GroupDescription>Group -
The macOS system must remove password hints from user accounts.
<VulnDiscussion>User accounts must not contain password hints. Password hints leak information about passwords that are currently in use and ...Rule Medium Severity -
SRG-OS-000067-GPOS-00035
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules