BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

os_prevent_priv_functions Configure the System to Block Non-Privileged Users from Executing Privileged Functions

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded macOS

Title

Configure the System to Block Non-Privileged Users from Executing Privileged Functions

Control

The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.

Discussion

The information system _IS_ configured to block standard users from executing privileged functions.

Privileged functions include disabling, circumventing, or altering implemented security safeguards and countermeasures.

The inherent configuration of the macOS does not allow for non-privileged users to be able to execute functions requiring privilege.

link:https://developer.apple.com/library/archive/documentation/Security/Conceptual/AuthenticationAndAuthorizationGuide/Introduction/Introduction.html[]

Related controls

ac-6.10

Fix

The technology inherently meets this requirement. No fix is required.