Ensure a Separate Timestamp Is Enabled for Each User/tty Combo

SrednjaNivo 1Automatskamacos

Opis

Using tty tickets ensures that a user must enter the sudo password in each Terminal session. With sudo versions 1.8 and higher, introduced in 10.12, the default value is to have tty tickets for each interface so that root access is limited to a specific terminal. The default configuration can be overwritten or not configured correctly on earlier versions of macOS.

Kako se proverava

Metod provere: Komanda ljuske

shell

out=$(/usr/bin/sudo -V 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c "Type of authentication timestamp record: tty" || true

Očekivani izlaz: 1

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Terminal: sudo /usr/sbin/visudo -f /etc/sudoers.d/<configuration file name>.

Svojstva

Operativni sistemi: macos-26
Oznake: macossystem-access
Referenca: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 5.5 Ensure a Separate Timestamp Is Enabled for Each User/tty Combo

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target macos