Title

A password must be required to wake a computer from sleep or screen saver. (Cat II impact)

Discussion

Require a password to wake a computer from sleep or screen saver. This helps prevent unauthorized access on unattended computers. Although there is a lock button for Security references, users do not need to be authorized as an administrator to make changes. Enable this password requirement for every user account on the computer.

Check Content

Open a terminal session and enter the following command. defaults -currentHost read com.apple.screensaver askForPassword -int If the action value is not set to "1", this is a finding.

Fix Text

Open a terminal session and enter the following command. defaults -currentHost write com.apple.screensaver askForPassword -int 1

Additional Identifiers

Rule ID: SV-38560r1_rule

Vulnerability ID: V-25328

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.