Title

The macOS system must be configured to disable hot corners. (Cat II impact)

Discussion

Although hot corners can be used to initiate a session lock or launch useful applications, they can also be configured to disable an automatic session lock from initiating. Such a configuration introduces the risk that a user might forget to manually lock the screen before stepping away from the computer.

Check Content

To check if the system is configured to disable hot corners, run the following commands: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep wvous If the return is null, or does not equal: "wvous-bl-corner = 0 wvous-br-corner = 0; wvous-tl-corner = 0; wvous-tr-corner = 0;" this is a finding.

Fix Text

This setting is enforced using the "Custom Policy" configuration profile.

Additional Identifiers

Rule ID: SV-252442r816140_rule

Vulnerability ID: V-252442

Group Title: SRG-OS-000031-GPOS-00012

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.