Details

Secure Keyboard Entry prevents other applications on the system and/or network from detecting and recording what is typed into Terminal.

Rationale:

Enabling Secure Keyboard Entry minimizes the risk of a key logger from detecting what is entered in Terminal.

Solution

Perform the following to enable secure keyboard entries in Terminal:
Graphical Method:

Open Terminal

Select Terminal

Select Secure Keyboard Entry

Terminal Method:

$ sudo -u defaults write -app Terminal SecureKeyboardEntry -bool true

example:

$ sudo -u firstuser defaults write -app Terminal SecureKeyboardEntry -bool true

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3423

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7
• CSCv7|9.2

Source

• Tenable.com/audits