Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Apple macOS 10.15
System Accounting with audit
Configure auditd
Configure auditd
An XCCDF Group - A logical subset of the XCCDF Benchmark
Details
Profiles
Prose
Configure auditd
1 Rule
The
auditd
program can perform comprehensive monitoring of system activity. This section describes recommended configuration settings for comprehensive auditing, but a full description of the auditing system's capabilities is beyond the scope of this guide.
Shutdown System When Auditing Failures Occur
Medium Severity
The macOS system must shut down by default upon audit failure unless availability is an overriding concern.