Ensure Firewall is configured to log
Details The socketfilter firewall is what is used when the firewall is turned on in the Security PreferencePane. In order...
- Home
- Security Hardening
- CIS Apple MacOS 10.12 L1 V1.2.0
CIS Apple MacOS 10.12 L1 V1.2.0
Ensure FTP server is not running
Details macOS used to have a graphical front-end to the embedded FTP server in the Operating System. FTP sharing could...Ensure http server is not running
Details macOS used to have a graphical front-end to the embedded Apache web server in the Operating System. Personal web...Ensure nfs server is not running
Details macOS can act as an NFS fileserver. NFS sharing could be enabled to allow someone on another computer to...Ensure security auditing retention
Details The macOS audit capability contains important information to investigate security or operational issues. This resource is only completely useful...Ensure time set is within appropriate limits
Details Correct date and time settings are required for authentication protocols, file creation, modification dates and log entries. Ensure that...Pair the remote control infrared receiver if enabled
Details An infrared receiver is a piece of hardware that sends information from an infrared remote control to another device...Password Age
Details Over time passwords can be captured by third parties through mistakes, phishing attacks, third party breaches or merely brute...Password History
Details Over time passwords can be captured by third parties through mistakes, phishing attacks, third party breaches or merely brute...Retain install.log for 365 or more days
Details macOS writes information pertaining to system-related events to the file /var/log/install.log and has a configurable retention policy for this...