An error occurred:

Apple macOS 13 (Ventura) STIG

Apple macOS 13 (Ventura) Security Technical Implementation Guide

ID Vuln ID Title Cat Status
APPL-13-001003 V-257170 The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions. Cat II
APPL-13-001010 V-257171 The macOS system must shut down by default upon audit failure (unless availability is an overriding concern). Cat II
APPL-13-001012 V-257172 The macOS system must be configured with audit log files owned by root. Cat II
APPL-13-001013 V-257173 The macOS system must be configured with audit log folders owned by root. Cat II
APPL-13-001014 V-257174 The macOS system must be configured with audit log files group-owned by wheel. Cat II
APPL-13-001015 V-257175 The macOS system must be configured with audit log folders group-owned by wheel. Cat II
APPL-13-001016 V-257176 The macOS system must be configured with audit log files set to mode 440 or less permissive. Cat II
APPL-13-001017 V-257177 The macOS system must be configured with audit log folders set to mode 700 or less permissive. Cat II
APPL-13-001020 V-257178 The macOS system must audit the enforcement actions used to restrict access associated with changes to the system. Cat II
APPL-13-001029 V-257179 The macOS system must allocate audit record storage capacity to store at least seven days of audit records when audit records are not immediately sent to a central audit record storage facility. Cat III
APPL-13-001030 V-257180 The macOS system must provide an immediate warning to the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) when allocated audit record storage volume reaches 75 percent of repository maximum audit record storage capacity. Cat III
APPL-13-001031 V-257181 The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts. Cat II
APPL-13-001044 V-257182 The macOS system must generate audit records for DOD-defined events such as successful/unsuccessful logon attempts, successful/unsuccessful direct access attempts, starting and ending time for user access, and concurrent logons to the same account from different sources. Cat II
APPL-13-001060 V-257183 The macOS system must accept and verify Personal Identity Verification (PIV) credentials, implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network, and only allow the use of DOD PKI-established certificate authorities for verification of the establishment of protected sessions. Cat II
APPL-13-001100 V-257184 The macOS system must require individuals to be authenticated with an individual authenticator prior to using a group authenticator. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.