Audit Touch ID

НискаНиво 1Ручни прегледmacos

Опис

Apple has integrated Touch ID with macOS and allows fingerprint use for many common operations. All use of Touch ID requires the presence of a password and the use of that password after every reboot, or when more than 48 hours has elapsed since the device was last unlocked. Touch ID is not a password replacement.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

GUI: System Settings > Touch ID & Password > Verify the Touch ID settings match your organization's requirements. Terminal: sudo -u <username> /usr/bin/bioutil -r ; sudo /usr/bin/bioutil -r -s | /usr/bin/awk '/timeout/'

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Terminal: sudo -u <username> /usr/bin/bioutil -w -u <0,1> ; sudo -u <username> /usr/bin/bioutil -w -a <0,1> ; sudo usr/bin/bioutil -w -s -o <value≤172800>. GUI: System Settings > Touch ID & Password > Set the Touch ID settings to your organization's requirements.

Својства

Оперативни системи: macos-26
Ознаке: macossystem-settings
Референца: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.12.2 Audit Touch ID