Details

Fast user switching allows multiple users to run applications simultaneously at console. There can be information disclosed about processes running under a different user. Without a specific configuration to save data and log out users can have unsaved data running in a background session that is not obvious.

Solution

In System Preferences: Accounts, Login Options, make sure the ‘Enable fast user switching’ checkbox is off.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/300

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-10

Source

• Tenable.com/audits