usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-06 01:51:56 +00:00
Code Issues 21 Actions 3 Packages Projects Releases Wiki Activity

minor fixes

Browse Source
This commit is contained in:
Allen Golbig
2020-12-21 14:28:32 -05:00
parent cde91a0640
commit f77ec2664a
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/audit/audit_flags_lo_configure.yaml
View File

@@ -5,7 +5,7 @@ discussion: |
Frequently, an attacker that successfully gains access to a system has only gained access to an account with limited privileges, such as a guest account or a service account. The attacker must attempt to change to another user account with normal or elevated privileges in order to proceed. Auditing both successful and unsuccessful attempts to switch to another user account (by way of monitoring login and logout events) mitigates this risk.
The information system monitors and login and logout events.
The information system monitors login and logout events.
check: |
/usr/bin/grep -Ec "^flags*.lo" /etc/security/audit_control
result:

2
rules/pwpolicy/pwpolicy_minimum_lifetime_enforce.yaml
View File

@@ -22,7 +22,7 @@ fix: |
<string>Minimum Password Lifetime</string>
<key>policyParameters</key>
<dict>
<key>policyAttributeMinimumLifetimeHours<key>
<key>policyAttributeMinimumLifetimeHours</key>
<integer>24</integer>
</dict>
</dict>