Audit Touch ID

DüşükDüzey 1Manuel incelememacos

Açıklama

Apple has integrated Touch ID with macOS and allows fingerprint use for many common operations. All use of Touch ID requires the presence of a password and the use of that password after every reboot, or when more than 48 hours has elapsed since the device was last unlocked. Touch ID is not a password replacement.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

GUI: System Settings > Touch ID & Password > Verify the Touch ID settings match your organization's requirements. Terminal: sudo -u <username> /usr/bin/bioutil -r ; sudo /usr/bin/bioutil -r -s | /usr/bin/awk '/timeout/'

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Terminal: sudo -u <username> /usr/bin/bioutil -w -u <0,1> ; sudo -u <username> /usr/bin/bioutil -w -a <0,1> ; sudo usr/bin/bioutil -w -s -o <value≤172800>. GUI: System Settings > Touch ID & Password > Set the Touch ID settings to your organization's requirements.

Özellikler

İşletim sistemleri: macos-26
Etiketler: macossystem-settings
Referans: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.12.2 Audit Touch ID