Ensure Show Password Hints Is Disabled

ВысокийУровень 1Автоматическаяmacos

Описание

Password hints are user-created text displayed when an incorrect password is used for an account. Password hints make it easier for unauthorized persons to gain access to systems by displaying information provided by the user to assist in remembering the password. This info could include the password itself or other information that might be readily discerned with basic knowledge of the end user.

Как проверяется

Метод проверки: Команда оболочки

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow').objectForKey('RetriesUntilHint').js
EOS

Ожидаемый вывод: 0

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Graphical Method: Perform the following steps to disable password hints from being shown: 1. Open System Settings 2. Select Lock Screen 3. Set 'Show password hints` to disabled Terminal Method: Run the following command to disable password hints: % /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow RetriesUntilHint -int 0 Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.loginwindow 2. The key to include is RetriesUntilHint 3. The key must be set to <integer>0</integer>

Свойства

Операционные системы: macos-14
Теги: authmacossonoma
Источник: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.10.5 Ensure Show Password Hints Is Disabled

Проверить этот хост

Выполните команду на компьютере, аудит которого вам разрешён. Сканирование работает только на чтение.

shell

tmaegis scan --target macos