Catalina – Automatically Remove or Disable Temporary or Emergency User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...
- Home
- Security Hardening
- NIST MacOS Catalina V1.5.0 All Profiles
NIST MacOS Catalina V1.5.0 All Profiles
Catalina – Automatically Remove or Disable Temporary User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Catalina – Configure Audit Failure Notification
Details The audit service _MUST_ be configured to immediately print messages to the console or email administrator users when an...Catalina – Configure Apple System Log Files Owned by Root and Group to Wheel
Details The Apple System Logs (ASL) _MUST_ be owned by root. ASL logs contain sensitive data about the system and...Catalina – Configure Apple System Log Files To Mode 640 or Less Permissive
Details The Apple System Logs (ASL) _MUST_ be configured to be writable by root and readable only by the root...Catalina – Configure Audit Capacity Warning
Details The audit service _MUST_ be configured to notify the system administrator when the amount of free disk space remaining...Catalina – Configure Audit Log Files Group to Wheel
Details Audit log files _MUST_ have the group set to wheel. The audit service _MUST_ be configured to create log...Catalina – Configure Audit Log Files to be Owned by Root
Details Audit log files _MUST_ be owned by root. The audit service _MUST_ be configured to create log files with...Catalina – Configure Audit Log Files to Mode 440 or Less Permissive
Details The audit service _MUST_ be configured to create log files that are readable only by the root user and...Catalina – Configure Audit Log Files to Not Contain Access Control Lists
Details The audit log files _MUST_ not contain access control lists (ACLs). This rule ensures that audit information and audit...