id: os_enforce_access_restrictions
title: "Enforce Access Restrictions"
discussion: |
  The information system _IS_ configured to enforce access restrictions and support auditing of the enforcement actions.

  The inherent configuration of a macOS provides users with the ability to set their own permission settings to control who can view and alter files on the computer.

  link:https://support.apple.com/guide/mac-help/change-permissions-for-files-folders-or-disks-mchlp1203/mac[]
check: |
  The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.
fix: |
  The technology inherently meets this requirement. No fix is required.
references:
  cce:
    - CCE-92784-8
  cci:
    - N/A
  800-53r5:
    - CM-5(1)
  800-53r4:
    - CM-5(1)
  disa_stig:
    - N/A
  srg:
    - N/A
macOS:
  - "14.0"
tags:
  - 800-53r5_high
  - 800-53r4_high
  - inherent
  - cnssi-1253_moderate
  - cnssi-1253_high
mobileconfig: false
mobileconfig_info: