Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Guide to the Secure Configuration of Apple macOS 10.15
Introduction
General Principles
Least Privilege
Least Privilege
An XCCDF Group - A logical subset of the XCCDF Benchmark
Details
Profiles
Prose
Least Privilege
Grant the least privilege necessary for user accounts and software to perform tasks. For example,
sudo
can be implemented to limit authorization to super user accounts on the system only to designated personnel. Another example is to limit logins on server systems to only those administrators who need to log into them in order to perform administration tasks.