The macOS system must disable hot corners.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-259422	APPL-14-000007	SV-259422r940888_rule		Medium

Description
Hot corners must be disabled. The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image. Although hot corners can be used to initiate a session lock or to launch useful applications, they can also be configured to disable an automatic session lock from initiating. Such a configuration introduces the risk that a user might forget to manually lock the screen before stepping away from the computer.

Description

Hot corners must be disabled. The information system conceals, via the session lock, information previously visible on the display with a publicly viewable image. Although hot corners can be used to initiate a session lock or to launch useful applications, they can also be configured to disable an automatic session lock from initiating. Such a configuration introduces the risk that a user might forget to manually lock the screen before stepping away from the computer.

STIG	Date
Apple macOS 14 (Sonoma) Security Technical Implementation Guide	2024-01-10

Details

Check Text ( C-63161r940886_chk )
Verify the macOS system is configured to disable hot corners with the following command: /usr/bin/profiles -P -o stdout \| /usr/bin/grep -Ec '"wvous-bl-corner" = 0\|"wvous-br-corner" = 0\|"wvous-tl-corner" = 0\|"wvous-tr-corner" = 0' If the result is not "4", this is a finding.

Fix Text (F-63069r940887_fix)
Configure the macOS system to disable hot corners by installing the "com.apple.ManagedClient.preferences" configuration profile.