CCE-95215-0| Platform: cpe:/o:apple:mac_os_11, cpe:/o:apple:mac_os_x:10.15 | Date: (C)2020-12-08 (M)2023-07-04 |
"Ensure login Screen has a customer message
A custom message that can be displayed at the lock screen and FileVault login screen. Often used to warn people of permitted system actions and possible legal consequences of misuse. The benchmark (macOS) states that displaying an access warning may reduce an attacker's tendency to access the system, and it may aid in the prosecution of an attacker."
Parameter:
[banner_text]
Technical Mechanism:
Fix:defaults write /Library/Preferences/com.apple.loginwindow.plist LoginwindowText -string "$LoginBanner"
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.1 | Attack Vector: LOCAL |
| Exploit Score: 2.5 | Attack Complexity: LOW |
| Impact Score: 2.5 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: LOW |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:67478 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:71669 |
