Check: OSX8-00-00020
Apple OSX 10.8 STIG:
OSX8-00-00020
(in version v1 r2)
Title
The operating system must retain the session lock until the user reestablishes access using established identification and authentication procedures. (Cat II impact)
Discussion
A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the system but does not want to log out because of the temporary nature of the absence. Once invoked, the session lock shall remain in place until the user reauthenticates. No other system activity aside from reauthentication can unlock the system.
Check Content
To check if the system has the correct setting in the configuration profile, run the following command: system_profiler SPConfigurationProfileDataType | grep "askForPassword" | awk '{ print $3 }' | sed 's/;//' The check should return a value of "1". If this is not defined or not set to "1", this is a finding.
Fix Text
To enforce this setting, it must be configured using a configuration profile.
Additional Identifiers
Rule ID: SV-65675r1_rule
Vulnerability ID: V-51465
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000056 |
The information system retains the session lock until the user reestablishes access using established identification and authentication procedures. |
Controls
Number | Title |
---|---|
AC-11 |
Session Lock |