macOS
TMA-MACOS14-2.12.1
Ensure Guest Account Is Disabled
Açıklama
The guest account allows users access to the system without having to create an account or password. Guest users are unable to make setting changes and cannot remotely login to the system. All files, caches, and passwords created by the guest user are deleted upon logging out. Disabling the guest account mitigates the risk of an untrusted user doing basic reconnaissance and possibly using privilege escalation attacks to take control of the system.
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
out=$(/usr/bin/dscl . -list /Users hint 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/awk 'NF > 1 {n++} END {print n+0}'- Beklenen çıktı
0
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Graphical Method: Perform the following steps to disable guest account availability: 1. Open System Settings 2. Select Users & Groups 3. Select the i next to the Guest User 4. Set Allow guests to log in to this computer to disabled Terminal Method: Run the following command to disable the guest account: % /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow GuestEnabled -bool false Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.MCX 2. The key to include is DisableGuestAccount 3. The key must be set to <true/> 4. The key to include is EnableGuestAccount 5. The key must be set to <false/>
Özellikler
- İşletim sistemleri
- macos-14
- Etiketler
- macossonoma
- Referans
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.12.1 Ensure Guest Account Is Disabled
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target macos