Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-51271 | OSX8-00-01075 | SV-65481r1_rule | Low |
Description |
---|
Finder must be set to always empty Trash securely. In Mac OS X Finder can be configured to always securely erase items placed in the Trash. This prevents data placed in the Trash from being restored. |
STIG | Date |
---|---|
Apple OS X 10.8 (Mountain Lion) Workstation STIG | 2015-02-10 |
Check Text ( C-53619r1_chk ) |
---|
To check that the finder will only present the option to securely empty trash run the following command as the primary user: system_profiler SPConfigurationProfileDataType | grep EmptyTrashSecurely | awk '{ print $3 }' | sed 's/;//' If the result does not return a setting, or the setting is not "1", this is a finding. |
Fix Text (F-56071r1_fix) |
---|
This should be enforced by a configuration profile. |