Details

Although hot corners can be used to initiate a session lock or launch useful applications, they can also be configured to disable an automatic session lock from initiating. Such a configuration introduces the risk that a user might forget to manually lock the screen before stepping away from the computer.

Solution

This setting is enforced using the ‘Custom Policy’ configuration profile.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_OS_X_10-15_V1R7_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-11(1)
• CAT|II
• CCI|CCI-000060
• Rule-ID|SV-225124r610901_rule
• STIG-ID|AOSX-15-000007
• STIG-Legacy|SV-111625
• STIG-Legacy|V-102663
• Vuln-ID|V-225124

Source

• Tenable.com/audits