usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-05 01:23:18 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

rename sysprefs_enforce_auto_logout.yaml to sysprefs_automatic_logout_enforce.yaml

Browse Source
This commit is contained in:
Bob Gendler
2020-12-10 10:27:15 -05:00
parent ef3ffc5aed
commit b009a02452
2 changed files with 1 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/sysprefs/sysprefs_automatic_logout_enforce.yaml
View File

@@ -1,4 +1,4 @@
id: sysprefs_enforce_auto_logout
id: sysprefs_automatic_logout_enforce
title: "Enforce Auto Logout After 24 Hours of Inactivity"
discussion: |
Auto logout _MUST_ be configured to automatically terminate a user session and log out the after 86400 seconds (24 hours) of inactivity.

42
rules/sysprefs/sysprefs_enforce_auto_logout.yaml
View File

@@ -1,42 +0,0 @@
id: sysprefs_enforce_auto_logout
title: "Enforce Auto Logout After 24 Hours of Inactivity"
discussion: |
Auto logout _MUST_ be configured to automatically terminate a user session and log out the after 86400 seconds (24 hours) of inactivity.
NOTE:The maximum that macOS can be configured for autologoff is 86400 seconds (24 hours).
[IMPORTANT]
====
The 24-hour automatic logout may cause disruptions to an organization’s workflow and/or loss of data. Information System Security Officers (ISSOs) are advised to first fully weigh the potential risks posed to their organization before opting to disable the 24-hour automatic logout setting.
====
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c '"com.apple.autologout.AutoLogOutDelay" = 86400'
fix: |
This is implemented by a Configuration Profile.
references:
cce:
- CCE-85424-0
cci:
- CCI-002361
800-53r4:
- AC-12
disa_stig:
- N/A
srg:
- SRG-OS-000279-GPOS-00109
800-171r2:
- 3.1.11
macOS:
- "11.0"
tags:
- 800-171
- cnssi-1253
- 800-53r4_moderate
- 800-53r4_high
- STIG
mobileconfig: true
mobileconfig_info:
.GlobalPreferences:
com.apple.autologout.AutoLogOutDelay: 86400