BaselineWatch
Desk

os_reauth_privilege Require users to reauthenticate for privilege escalation

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded macOS

Title

Require users to reauthenticate for privilege escalation

Control

The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.

Discussion

Without reauthentication, users may access resources or perform tasks for which they do not have authorization. When operating systems provide the capability to escalate a functional capability, it is critical the user reauthenticate.

Related controls

ia-11

Fix

The technology inherently meets this requirement. No fix is required.