Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-51267 | OSX8-00-01060 | SV-65477r1_rule | Medium |
Description |
---|
An Emergency Administrator Account must be created. Interview the SA to determine if an emergency administrator account exists and is stored with its password in a secure location. This emergency account should have a UID less than "500", and be hidden from view. |
STIG | Date |
---|---|
Apple OS X 10.8 (Mountain Lion) Workstation STIG | 2015-02-10 |
Check Text ( C-53615r1_chk ) |
---|
To check to see if UIDs below "500" are hidden, run the following command: sudo defaults read /Library/Preferences/com.apple.loginwindow Hide500Users If the result is not "1", this is a finding. |
Fix Text (F-56067r1_fix) |
---|
To hide user accounts below "500", run the following command: sudo defaults write /Library/Preferences/com.apple.loginwindow Hide500Users -bool YES |