This is a potential security issue, you are being redirected to https://ncp.nist.gov
|Apple OS X 10.15||cpe:/o:apple:mac_os_x:10.15 (View CVEs)|
Included in this release are updated guidance documents (HTML, PDF, XLS, SCAP) for the NIST SP 800-53r5 Low, Moderate, and High, NIST 800-171, DISA-STIG, CNSSI-1253, and CIS Critical Security Controls Version 8 baselines for macOS Catalina (10.15). Included is a guidance document in HTML, PDF, XLS, and SCAP content for evaluation. Additional resources can be found at the macOS Security Compliance Project Github https://github.com/usnistgov/macos_security
A document containing known issues with the SCAP can be found with the release files.
This document has been created for IT professionals, particularly system administrators and information security personnel (security managers, engineers, administrators, etc.) who are responsible for securing or maintaining the security of macOS Catalina 10.15 systems. Auditors and others who need to assess the security of systems may also find this publication useful. The document assumes that the reader has experience installing and administering macOS based systems.
macOS 10.15 The SCAP content has been validated with NIST SCAP Validation Tool.
The recommendations are consistent with the security control baselines advocated in NIST SP 800-53 Rev 5 (NIST FISMA implementation project publication).
Do not attempt to implement any of the settings without first testing them in a non-operational environment. These recommendations have only been tested on macOS Catalina 10.15. These settings may be applicable to other macOS systems; however, NIST has not tested other macOS based systems with these settings. Certain configuration profiles (Smartcards), when applied could leave a system in a state where a user can no longer login with a password. Please use caution when applying configuration settings to a system. If an MDM is already being leveraged, many of these profile settings may be available through the vendor These recommendations were developed at the National Institute of Standards and Technology, which collaborated with NASA, DoD, LANL, and Apple. NIST assumes no responsibility whatsoever for their use by other parties, and makes no guarantees, expressed or implied, about their quality, reliability, or any other characteristic. We would appreciate acknowledgement if the recommendations are used.
THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND, EITHER EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND FREEDOM FROM INFRINGEMENT, AND ANY WARRANTY THAT THE DOCUMENTATION WILL CONFORM TO THE SOFTWARE, OR ANY WARRANTY THAT THE SOFTWARE WILL BE ERROR FREE. IN NO EVENT SHALL NIST BE LIABLE FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM, OR IN ANY WAY CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY, CONTRACT, TORT, OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY PERSONS OR PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED FROM, OR AROSE OUT OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR SERVICES PROVIDED HEREUNDER.
There is a public GitHub where issues and inquiries of general use and support can be raised https://github.com/usnistgov/macos_security
This work includes contributions from the United States Government, members of the public, and Apple Inc. Except as otherwise noted, this work is licensed under Creative Commons Attribution 4.0 International Public License
[Catalina, Revision 2] - 2020-11-10 Rules: Added Rules - os_ssh_server_alive_count_max_configure.yaml - os_ssh_server_alive_interval_configure.yaml - sysprefs_ssh_disable.yaml SCAP updated as well updated reference link - (http to https) - 11/16/2020 updated status to FINAL - 12/17/2020 Updated checks for multiple rules. null NIST 800-53r5 added Added additional security baselines and cis critical security controls version 8 references. Updated checks.
|https://github.com/usnistgov/macos_security/||macOS Security Compliance Project|