The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator.
An XCCDF Rule
Description
Administrator users must never log in directly as root. To assure individual accountability and prevent unauthorized access, logging in as root over a remote connection must be disabled. Administrators must only run commands as root after first authenticating with their individual usernames and passwords.
- ID
- SV-257184r905185_rule
- Version
- APPL-13-001100
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the macOS system to disable root logins over SSH with the following command:
/usr/bin/sudo /usr/bin/sed -i.bak 's/^[\#]*PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config