TMAegisBeta
更多 macos 规则

macOS

TMA-MACOS15-5.2.3

Ensure Complex Password Must Contain Alphabetic Characters Is Configured

高级别 2人工审核macos

说明

Complex passwords contain one character from each of the following classes: English uppercase letters, English lowercase letters, Westernized Arabic numerals, and non- alphanumeric characters. Ensure that an Alphabetic character is part of the password policy on the computer.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

GUI: System Settings > General > Device Management > Verify that an installed profile has Requires Alphanumeric set to True. Terminal: pref1=$(sudo /usr/bin/pwpolicy -getaccountpolicies | /usr/bin/grep -e "Contain at least one number and one alphabetic character." | cut -b 13-68) && pref2=$(sudo /usr/bin/pwpolicy -getaccountpolicies | /usr/bin/grep -A1 minimumLetters | ...

修复方式

修复方法: 操作指南或基础设施补丁

Profile (preferred): com.apple.mobiledevice.passwordpolicy requireAlphanumeric = <true/>. Terminal: sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy -setaccountpolicies "requiresAlpha=<value≥1>" ; sudo /usr/bin/pwpolicy -n /Local/Default -setglobalpolicy "requiresAlpha=1".

属性

操作系统
macos-15
标签
macossystem-access
参考
CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 5.2.3 Ensure Complex Password Must Contain Alphabetic Characters Is Configured