Check: OSX8-00-02060
Apple OSX 10.8 STIG:
OSX8-00-02060
(in version v1 r2)
Title
The system must be integrated into a directory services infrastructure. (Cat II impact)
Discussion
Distinct user account databases on each separate system cause problems with username and password policy enforcement. Most approved directory services infrastructure solutions, such as Active Directory, allow centralized management of users and passwords.
Check Content
Ask the SA or IAO if the system is integrated into a directory services infrastructure, such as Active Directory. If the system is not integrated into a directory service infrastructure, this is a finding. Mitigation: If there is no directory services infrastructure available, reduce severity to CAT III.
Fix Text
Integrate the system into an existing directory services infrastructure, such as Active Directory.
Additional Identifiers
Rule ID: SV-68085r1_rule
Vulnerability ID: V-53867
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |