Navigate

Check: APPL-13-000007

Apple macOS 13 (Ventura) STIG: APPL-13-000007 (in versions v1 r4 through v1 r1)

Title

The macOS system must be configured to disable hot corners. (Cat II impact)

Discussion

Although hot corners can be used to initiate a session lock or launch useful applications, they can also be configured to disable an automatic session lock from initiating. Such a configuration introduces the risk that a user might forget to manually lock the screen before stepping away from the computer.

Check Content

Verify the macOS system is configured to disable hot corners with the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "wvous" "wvous-bl-corner" = 0; "wvous-br-corner" = 0; "wvous-tl-corner" = 0; "wvous-tr-corner" = 0; If the command does not return the following, this is a finding. "wvous-bl-corner = 0; wvous-br-corner = 0; wvous-tl-corner = 0; wvous-tr-corner = 0;"

Fix Text

Configure the macOS system to disable hot corners by installing the "Custom Policy" configuration profile.

Additional Identifiers

Rule ID: SV-257148r905077_rule

Vulnerability ID: V-257148

Group Title: SRG-OS-000031-GPOS-00012

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000060	The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-11 (1)	Pattern-Hiding Displays