Monterey – Configure Automated Flaw Remediation
Details The macOS system _MUST_ be configured to determine the state of system components with regard to flaw remediation. NOTE:...
- Home
- Security Hardening
- NIST MacOS Monterey V1.0.0 800 53R5 Moderate
NIST MacOS Monterey V1.0.0 800 53R5 Moderate
Monterey – Configure Gatekeeper to Disallow End User Override
Details Gatekeeper _MUST_ be configured with a configuration profile to prevent normal users from overriding its settings. If users are...Monterey – Configure Login Window to Prompt for Username and Password
Details The login window _MUST_ be configured to prompt all users for both a username and a password. By default,...Monterey – Configure macOS to Use an Authorized Time Server
Details Approved time servers _MUST_ be the only servers configured for use. This rule ensures the uniformity of time stamps...Monterey – Configure SSH ServerAliveInterval option set to 900 or less
Details SSH _MUST_ be configured with an Active Server Alive Maximum Count set to 900 or less. Setting the Active...Monterey – Configure Sudoers to Authenticate Users on a Per -tty Basis
Details The file /etc/sudoers _MUST_ be configured to include tty_tickets. This rule ensures that the “sudo” command will prompt for...Monterey – Configure System Log Files Owned by Root and Group to Wheel
Details The system log files _MUST_ be owned by root. System logs contain sensitive data about the system and users....Monterey – Configure System Log Files to Mode 640 or Less Permissive
Details The system logs _MUST_ be configured to be writable by root and readable only by the root user and...Monterey – Configure System to Audit All Administrative Action Events
Details The auditing system _MUST_ be configured to flag administrative action (ad) events. Administrative action events include changes made to...Monterey – Configure System to Audit All Failed Change of Object Attributes
Details The audit system _MUST_ be configured to record enforcement actions of failed attempts to modify file attributes (fm). Enforcement...