Title

The ability to use corners to disable the screen saver must be disabled. (Cat II impact)

Discussion

A computer should require authentication when waking from sleep or screen saver. Exposé Spaces preferences can be configured to disable the screen saver by moving the mouse cursor to a corner of the screen. Do not configure a corner to disable the screen saver.

Check Content

Open System Preferences->Exposé & Spaces, Exposé pane. Ensure no corners are set to "Disable Screen saver" in the "Active Screen Corners" section for each user account. If any account is set to disable screen savers via corners, this is a finding. NOTE: Do this for each user on the system.

Fix Text

Open System Preferences->Exposé & Spaces, Exposé pane. Remove any corners which are set to "Disable Screen saver" in the "Active Screen Corners" section for each user account.

Additional Identifiers

Rule ID: SV-37242r1_rule

Vulnerability ID: V-25317

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.