Catalina – Automatically Remove or Disable Temporary or Emergency User Accounts within 72 Hours Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...
Catalina – Automatically Remove or Disable Temporary User Accounts within 72 Hours Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...
Catalina – Configure Audit Failure Notification Details The audit service _MUST_ be configured to immediately print messages to the console or email administrator users when an...
Catalina – Configure Apple System Log Files Owned by Root and Group to Wheel Details The Apple System Logs (ASL) _MUST_ be owned by root. ASL logs contain sensitive data about the system and...
Catalina – Configure Apple System Log Files To Mode 640 or Less Permissive Details The Apple System Logs (ASL) _MUST_ be configured to be writable by root and readable only by the root...
Catalina – Configure Audit Capacity Warning Details The audit service _MUST_ be configured to notify the system administrator when the amount of free disk space remaining...
Catalina – Configure Audit Log Files Group to Wheel Details Audit log files _MUST_ have the group set to wheel. The audit service _MUST_ be configured to create log...
Catalina – Configure Audit Log Files to be Owned by Root Details Audit log files _MUST_ be owned by root. The audit service _MUST_ be configured to create log files with...
Catalina – Configure Audit Log Files to Mode 440 or Less Permissive Details The audit service _MUST_ be configured to create log files that are readable only by the root user and...
Catalina – Configure Audit Log Files to Not Contain Access Control Lists Details The audit log files _MUST_ not contain access control lists (ACLs). This rule ensures that audit information and audit...