Details
If the Screen Saver is used to lock the screen, verify the Display Sleep settings are longer than the Screen Saver setting. If the display goes to sleep before the screen saver activates, the computer will appear to be off, but will be unprotected. Users of the system can easily assume that the computer is protected when the display goes to sleep. The computer should be configured so that the screen is locked whenever the display turns off automatically.
Solution
In System Preferences: Energy Saver, drag the slider for “Put the display(s) to sleep…” to a reasonable number, but longer than the screen saver setting. The Mac will display a warning if the number is too short. Alternatively, use the following command: sudo pmset -c displaysleep 0 Note: The -c flag means “wall power.” Different settings must be used for other power sources. Impact: If the display sleeps before the screensaver is active the computer may be unlocked and available for an unauthorized user.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.