Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000077-GPOS-00045

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must prohibit password reuse for a minimum of five generations.

    &lt;VulnDiscussion&gt;The macOS must be configured to enforce a password history of at least five previous passwords when a password is created. T...
    Rule Medium Severity
  • SRG-OS-000078-GPOS-00046

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require a minimum password length of 14 characters.

    &lt;VulnDiscussion&gt;The macOS must be configured to require a minimum of 14 characters be used when a password is created. This rule enforces pa...
    Rule Medium Severity
  • SRG-OS-000266-GPOS-00101

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require passwords contain a minimum of one special character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require at least one special character be used when a password is created. Special character...
    Rule Medium Severity
  • SRG-OS-000079-GPOS-00047

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable password hints.

    &lt;VulnDiscussion&gt;Password hints must be disabled. Password hints leak information about passwords that are currently in use and can lead to l...
    Rule Medium Severity
  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must enable firmware password.

    &lt;VulnDiscussion&gt;A firmware password must be enabled and set. Single user mode, recovery mode, the Startup Manager, and several other tools a...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules