Details

Configuring Secure Empty Trash mitigates the risk of an admin user on the system recovering sensitive files that the user has deleted. It is possible for anyone with physical access to the device to get access if FileVault is not used, or to recover deleted data if the FileVault volume is already mounted.

Solution

Perform the following to implement the prescribed state:
Select Finder
Select Preferences
Select Advanced
Check Empty Trash Securely

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/300

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-6b.
• CSCv6|3.1

Source

• Tenable.com/audits