Skip to content

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable Printer Sharing.

    &lt;VulnDiscussion&gt;Printer Sharing must be disabled.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&l...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable Remote Management.

    &lt;VulnDiscussion&gt;Remote Management must be disabled.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the Bluetooth system settings pane.

    &lt;VulnDiscussion&gt;The Bluetooth System Setting pane must be disabled to prevent access to the Bluetooth configuration.&lt;/VulnDiscussion&gt;&l...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the iCloud Freeform services.

    &lt;VulnDiscussion&gt;The macOS built-in Freeform.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provi...
    Rule Medium Severity
  • SRG-OS-000403-GPOS-00182

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must issue or obtain public key certificates from an approved service provider.

    &lt;VulnDiscussion&gt;The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only ...
    Rule Medium Severity
  • SRG-OS-000071-GPOS-00039

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require passwords contain a minimum of one numeric character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require at least one numeric character be used when a password is created. This rule enforce...
    Rule Medium Severity
  • SRG-OS-000076-GPOS-00044

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must restrict maximum password lifetime to 60 days.

    &lt;VulnDiscussion&gt;The macOS must be configured to enforce a maximum password lifetime limit of at least 60 days. This rule ensures that users ...
    Rule Medium Severity
  • SRG-OS-000078-GPOS-00046

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require a minimum password length of 14 characters.

    &lt;VulnDiscussion&gt;The macOS must be configured to require a minimum of 14 characters be used when a password is created. This rule enforces pa...
    Rule Medium Severity
  • SRG-OS-000266-GPOS-00101

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require passwords contain a minimum of one special character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require at least one special character be used when a password is created. Special character...
    Rule Medium Severity
  • SRG-OS-000079-GPOS-00047

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable password hints.

    &lt;VulnDiscussion&gt;Password hints must be disabled. Password hints leak information about passwords that are currently in use and can lead to l...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules