TMAegisBeta
Više pravila za macos

macOS

TMA-MACOS14-2.10.2

Ensure Require Password After Screen Saver Begins or Display Is Turned Off Is Enabled for 5 Seconds or Immediately

NiskaNivo 1Automatskamacos

Opis

Sleep and screen saver modes are low power modes that reduce electrical consumption while the system is not in use. Prompting for a password when waking from sleep or screen saver mode mitigates the threat of an unauthorized person gaining access to a system in the user's absence.

Kako se proverava

Metod provere: Komanda ljuske

shell
[ -x /usr/bin/pmset ] || exit 1
/usr/sbin/sysctl -n machdep.cpu.brand_string | /usr/bin/grep -q Intel || { echo 0; exit 0; }
/usr/bin/pmset -g custom | /usr/bin/awk '$1 == "powernap" && $2 == 1 {n++} END {print n+0}'
Očekivani izlaz
0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Graphical Method: Perform the following steps to enable a password for unlock after a screen saver begins or after sleep: 1. Open System Settings 2. Select Lock Screen 3. Set Require password after screensaver begins or display is turned off to either After 0 seconds or After 5 seconds Terminal Method: Run the following command to require a password to unlock the computer after the screen saver engages or the computer sleeps: % /usr/bin/sudo /usr/sbin/sysadminctl -screenLock immediate -password <administrator password> or % /usr/bin/sudo /usr/sbin/sysadminctl -screenLock 5 seconds -password <administrator password> Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.screensaver 2. The key to include is askForPassword 3. The key must be set to <true/> 4. The key to also include is askForPasswordDelay 5. The key must be set to <integer><0,5></integer>

Svojstva

Operativni sistemi
macos-14
Oznake
authmacossonoma
Referenca
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.10.2 Ensure Require Password After Screen Saver Begins or Display Is Turned Off Is Enabled for 5 Seconds or Immediately

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target macos