Details

A screen saver must be enabled and set to require a password to unlock. An excessive grace period impacts the ability for a session to be truly locked, requiring authentication to unlock.

Solution

This setting is enforced using the ‘Login Window Policy’ configuration profile.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_OS_X_10-15_V1R7_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-11b.
• CAT|II
• CCI|CCI-000056
• Rule-ID|SV-225120r610901_rule
• STIG-ID|AOSX-15-000003
• STIG-Legacy|SV-111617
• STIG-Legacy|V-102655
• Vuln-ID|V-225120

Source

• Tenable.com/audits