macOS
TMA-MACOS14-2.3.3.11
Ensure Computer Name Does Not Contain PII or Protected Organizational Information
説明
If the computer is used in an organization that assigns host names, it is a good idea to change the computer name to the host name. This is more of a best practice than a security measure. If the host name and the computer name are the same, computer support may be able to track problems down more easily. For organizations or for users that self-administer their own computers, it is important to not use sensitive or Personal Identifiable Information (PII) in computer names. The name of a computer that uses untrusted networks will be exposed at a minimum to the responsible network team of that network. For instance, having your name as your hostname can provide useful knowledge to an attacker monitoring the network to which you may be connected. Examples of possibly inappropriate content in computer names include: - User directory account names - Computer directory account names where...
チェック方法
監査方法: 手動レビュー
Graphical Method: Perform the following steps to verify the computer name: 1. Open System Settings 2. Select General 3. Select Sharing 4. Verify that Hostname is set to your organization's requirements
修正方法
修正方法: ガイダンスまたは IaC パッチ
Graphical Method: Perform the following steps to set the computer name: 1. Open System Settings 2. Select General 3. Select Sharing 4. Select Edit... 5. Set Hostname to your organization's requirements
プロパティ
- オペレーティングシステム
- macos-14
- タグ
- macossonoma
- 参照
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.11 Ensure Computer Name Does Not Contain PII or Protected Organizational Information