id: os_enforce_access_restrictions
title: Enforce Access Restrictions
discussion: |
  The information system _IS_ configured to enforce access restrictions and support auditing of the enforcement actions.

  The inherent configuration of a macOS provides users with the ability to set their own permission settings to control who can view and alter files on the computer.

  link:https://support.apple.com/guide/mac-help/change-permissions-for-files-folders-or-disks-mchlp1203/mac[]
check: |
  The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
fix: |
  The technology inherently meets this requirement. No fix is required.
references:
  cce:
    - CCE-95184-8
  cci:
    - N/A
  800-53r5:
    - CM-5(1)
  800-53r4:
    - CM-5(1)
  disa_stig:
    - N/A
  srg:
    - SRG-OS-000364-GPOS-00151
macOS:
  - '26.0'
tags:
  - 800-53r5_high
  - 800-53r4_high
  - inherent
  - cnssi-1253_high
  - srg
  - cnssi-1253_moderate
mobileconfig: false
mobileconfig_info:
