Apple OS X 10.13 Security Technical Implementation Guide

The Apple OS X 10.13 Security Technical Implementation Guide (V2 R5) has 135 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

135STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Wed Apr 27 2022

The macOS system must be integrated into a directory services infrastructure.

Apple OS X 10.13 Security Technical Implementation Guide

Assessment Title

Rule Text

The macOS system must be integrated into a directory services infrastructure.

Description

Discussion Text

Distinct user account databases on each separate system cause problems with username and password policy enforcement. Most approved directory services infrastructure solutions allow centralized management of users and passwords.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214926

Rule

SV-214926r609363_rule

Severity

high

Rule Version

AOSX-13-002060

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To determine if the system is integrated to a directory service, ask the System Administrator (SA) or Information System Security Officer (ISSO) or run the following command:

/usr/bin/sudo dscl localhost -list . | /usr/bin/grep -vE '(Contact | Search | Local)'

If nothing is returned, or if the system is not integrated into a directory service infrastructure, this is a finding.

Implementation Procedure

Fix Text

Integrate the system into an existing directory services infrastructure.

STIG check 121 of 135 in the Apple OS X 10.13 STIG checklist

← Previous · V-214925The macOS system must be configured to disable AirDrop.Next · V-214927 →The macOS system must enforce a 60-day maximum password lifetime restriction.