Skip to content

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the iCloud Freeform services.

    &lt;VulnDiscussion&gt;The macOS built-in Freeform.app connection to Apple's iCloud service must be disabled. Enabling any service increases the at...
    Rule Medium Severity
  • SRG-OS-000403-GPOS-00182

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must issue or obtain public key certificates from an approved service provider.

    &lt;VulnDiscussion&gt;The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only ...
    Rule Medium Severity
  • SRG-OS-000071-GPOS-00039

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require that passwords contain a minimum of one numeric character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require at least one numeric character be used when a password is created. This rule enforce...
    Rule Medium Severity
  • SRG-OS-000076-GPOS-00044

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must restrict maximum password lifetime to 60 days.

    &lt;VulnDiscussion&gt;The macOS must be configured to enforce a maximum password lifetime limit of at least 60 days. This rule ensures that users ...
    Rule Medium Severity
  • SRG-OS-000078-GPOS-00046

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must require a minimum password length of 14 characters.

    &lt;VulnDiscussion&gt;The macOS must be configured to require that a minimum of 14 characters be used when a password is created. This rule enforc...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules