No profile (default benchmark)
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000095-GPOS-00049
Group -
The macOS system must disable Apple Intelligence Image Generation.
Apple Intelligence features that use off-device artificial intelligence must be disabled. Use of off-device AI poses a data loss risk.Rule Medium Severity -
SRG-OS-000095-GPOS-00049
Group -
The macOS system must disable Apple Intelligence Writing Tools.
Apple Intelligence features that use off device Artificial Intelligence must be disabled. Use of off-device AI poses a data loss risk.Rule Medium Severity -
SRG-OS-000439-GPOS-00195
Group -
The macOS system must be a supported release.
An operating system release is considered "supported" if the vendor continues to provide security patches for the product. With an unsupported release, it will not be possible to resolve security i...Rule Medium Severity -
SRG-OS-000023-GPOS-00006
Group -
The macOS system must enforce SSH to display a policy banner.
SSH must be configured to display a policy banner. Displaying a standardized and approved use notification before granting access to the operating system ensures that users are provided with priva...Rule Medium Severity -
SRG-OS-000365-GPOS-00152
Group -
The macOS system must be configured to audit all failed program execution on the system.
The audit system must be configured to record enforcement actions of access restrictions, including failed program execute (-ex) attempts. Enforcement actions are the methods or mechanisms used to...Rule Medium Severity -
SRG-OS-000057-GPOS-00027
Group -
The macOS system must configure audit_control to not contain access control lists (ACLs).
/etc/security/audit_control must not contain ACLs. /etc/security/audit_control contains sensitive configuration data about the audit service. This rule ensures that the audit service is configured...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
Group -
The macOS system must disable sending audio recordings and transcripts to Apple.
The ability for Apple to store and review audio recordings and transcripts of vocal shortcuts and voice control interactions must be disabled. The information system must be configured to provide ...Rule Medium Severity -
SRG-OS-000095-GPOS-00049
Group -
The macOS system must disable sending search data from Spotlight to Apple.
Sending data to Apple to help improve search must be disabled. The information system must be configured to provide only essential capabilities. Disabling the submission of search data will mitiga...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.