Navigate

Check: APPL-14-000024

Apple macOS 14 (Sonoma) STIG: APPL-14-000024 (in versions v1 r2 through v1 r1)

Title

The macOS system must enforce SSH to display the Standard Mandatory DOD Notice and Consent Banner. (Cat II impact)

Discussion

Displaying a standardized and approved use notification before granting access to the operating system ensures that users are provided with privacy and security notification verbiage that is consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. System use notifications are required only for access via logon interfaces with human users and are not required when such human interfaces do not exist. The banner must be formatted in accordance with DTM-08-060. Note: /etc/ssh/sshd_config will be automatically modified to its original state following any update or major upgrade to the operating system. Satisfies: SRG-OS-000023-GPOS-00006,SRG-OS-000024-GPOS-00007

Check Content

Verify the macOS system is configured to display the contents of "/etc/banner" before granting access to the system with the following command: /usr/sbin/sshd -G | /usr/bin/grep -c "^banner /etc/banner" If the command does not return "1", this is a finding.

Fix Text

Configure the macOS system to display the contents of "/etc/banner" before granting access to the system by creating a plain text file in the /private/etc/ssh/sshd_config.d/ directory containing the following: banner /etc/banner

Additional Identifiers

Rule ID: SV-259430r940912_rule

Vulnerability ID: V-259430

Group Title: SRG-OS-000023-GPOS-00006

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000048	The information system displays an organization-defined system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.
CCI-000050	The information system retains the notification message or banner on the screen until users acknowledge the usage conditions and take explicit actions to log on to or further access the information system.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-8	System Use Notification