id: os_reauth_privilege
title: Require users to reauthenticate for privilege escalation
discussion: |
  Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.
check: |
  The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
fix: |
  The technology inherently meets this requirement. No fix is required.
references:
  cce:
    - CCE-95275-4
  cci:
    - N/A
  800-53r5:
    - IA-11
  800-53r4:
    - IA-11
  disa_stig:
    - N/A
  srg:
    - SRG-OS-000373-GPOS-00157
    - SRG-OS-000373-GPOS-00156
  800-171r3:
    - 03.05.01
macOS:
  - '26.0'
tags:
  - 800-171
  - inherent
  - cnssi-1253_low
  - cnssi-1253_high
  - srg
  - cnssi-1253_moderate
mobileconfig: false
mobileconfig_info:
