Skip to content

Apple macOS 15 (Sequoia) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000078-GPOS-00046

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require a minimum password length of 14 characters.

    &lt;VulnDiscussion&gt;The macOS must be configured to require that a minimum of 14 characters be used when a password is created. This rule enforc...
    Rule Medium Severity
  • SRG-OS-000266-GPOS-00101

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require that passwords contain a minimum of one special character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require that at least one special character be used when a password is created. Special char...
    Rule Medium Severity
  • SRG-OS-000079-GPOS-00047

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must enable firmware password.

    &lt;VulnDiscussion&gt;A firmware password must be enabled and set. Single user mode, recovery mode, the Startup Manager, and several other tools a...
    Rule Medium Severity
  • SRG-OS-000079-GPOS-00047

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must remove password hints from user accounts.

    &lt;VulnDiscussion&gt;User accounts must not contain password hints. Password hints leak information about passwords in use and can lead to loss o...
    Rule Medium Severity
  • SRG-OS-000067-GPOS-00035

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must enforce smart card authentication.

    &lt;VulnDiscussion&gt;Smart card authentication must be enforced. The use of smart card credentials facilitates standardization and reduces the ri...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules