Ensure Complex Password Must Contain Alphabetic Characters Is Configured

ВисокаНиво 2Ручни прегледmacos

Опис

Complex passwords contain one character from each of the following classes: English uppercase letters, English lowercase letters, Westernized Arabic numerals, and non- alphanumeric characters. Ensure that an Alphabetic character is part of the password policy on the computer. The more complex a password, the more resistant it will be against persons seeking unauthorized access to a system.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Graphical Method: Perform the following steps to ensure that the passwords must contain at least 1 alphabetic character: 1. Open System Settings 2. Select Privacy & Security 3. Select Profiles 4. Verify that an installed profile has Requires Alphanumeric set to True Terminal Method: Run the following command to verify that the password requires at least one letter: % pref1=$(/usr/bin/sudo /usr/bin/pwpolicy -getaccountpolicies | /usr/bin/grep -e "Contain at least one number and one alphabetic character." | cut -b 13- 68) && pref2=$(/usr/bin/sudo /usr/bin/pwpolicy -getaccountpolicies | /usr/bin/grep -A1 minimumLetters | /usr/bin/tail -1 | /usr/bin/cut -d'>' -f2 | /usr/bin/cut -d '<' -f1) && if [ "$pref1" = "Contain at least one number and one alphabetic character" ]; then echo "true"; elif [[ "$pref2" != "" && pref2 -ge 1 ]]; then echo "true"; else echo "false"; fi true

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Terminal Method: Run the following command to set that passwords must contain at least one letter: % /usr/bin/sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy - setaccountpolicies "requiresAlpha=<value≥1>" example: % /usr/bin/sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy "requiresAlpha=1" Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.mobiledevice.passwordpolicy 2. The key to include is requireAlphanumeric 3. The key must be set to <true/> Note: This profile sets a requirement of both an alphabetical and a numeric character. Note: The profile method is the preferred method for setting password policy since - setglobalpolicy in pwpolicy is deprecated and will likely be removed in a future macOS release.

Својства

Оперативни системи: macos-14
Ознаке: authmacossonoma
Референца: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 5.2.3 Ensure Complex Password Must Contain Alphabetic Characters Is Configured