Details

The information system _IS_ configured to ensure that the unauthorized disclosure of data does not occur when resources are shared.

The inherent configuration of the macOS does not allow for resources to be shared between users without authorization.

link:https://developer.apple.com/library/archive/documentation/Security/Conceptual/AuthenticationAndAuthorizationGuide/Permissions/Permissions.html[]

Solution

The technology inherently meets this requirement. No fix is required.

Supportive Information

The following resource is also helpful.

• https://github.com/usnistgov/macos_security

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Unix.

References

• 800-53|SC-4
• CCE|CCE-85361-4, CCI|CCI-001090

Source

• Tenable.com/audits