Ensure Complex Password Must Contain Special Character Is Configured

높음레벨 2수동 검토macos

설명

Complex passwords contain one character from each of the following classes: English uppercase letters, English lowercase letters, Westernized Arabic numerals, and non- alphanumeric characters. Ensure that a special character is part of the password policy on the computer.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

GUI: System Settings > General > Device Management > Verify that an installed profile has Min Complex Length set to ≥ 1. Terminal: pref1=$(sudo /usr/bin/pwpolicy -getaccountpolicies | /usr/bin/grep -e "policyAttributePassword matches '(.*[^a-zA-Z0-9].*){1,}'" | cut -b 12-67) && pref2=$(sudo /usr/bin/pwpolicy -getaccountpolicies | /usr/bin/grep -A1 minimumSymbols | ...

조치 방법

조치 방식: 가이드 또는 인프라 패치

Profile (preferred): com.apple.mobiledevice.passwordpolicy minComplexChars = <integer><value≥1></integer>. Terminal: sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy -setaccountpolicies "requiresSymbol=<value≥1>" ; sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy "requiresSymbol=1".

속성

운영 체제: macos-15
태그: macossystem-access
참고 자료: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 5.2.5 Ensure Complex Password Must Contain Special Character Is Configured