TMAegisBeta
更多 macos 规则

macOS

TMA-MACOS-6.5.1

Audit Passwords

低级别 1人工审核macos

说明

Apple has provided a new interface in macOS Monterey for managing passwords that mirrors the interfaced capability already available in iOS. Password management in macOS was previously available in both Safari Preferences and in Keychain Access. Apple is attempting to simplify password management for macOS and make the user experience more similar to iOS.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

GUI: Passwords > Enter the user's password > Security > Verify that any recommendations or compromised passwords are set to match your organization's settings > Review applications with stored passwords to ensure that Enterprise managed passwords are not stored inappropriately. Application interfaces may need to be considered as well, as they allow the opportunity to store passwords that should not be saved.

修复方式

修复方法: 操作指南或基础设施补丁

GUI: Passwords > Enter the user's password > Security > Remove stored passwords that should not be saved > Update any passwords that are compromised and are still in use by the organization.

属性

操作系统
macos-26
标签
macosapplications
参考
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 6.5.1 Audit Passwords