Skip to content

Commit

Permalink
Update standard-query-library.yml (#26346)
Browse files Browse the repository at this point in the history
closes:
#24415 (comment)

- Updated policy to the suggestion from @jmwatts in the linked bug
report.
- Added caveat note.

@ddribeiro, please can you confirm that the suggested policy edit is
good to go?

Co-authored-by: Eric <eashaw@sailsjs.com>
  • Loading branch information
mike-j-thomas and eashaw authored Feb 17, 2025
1 parent df3954b commit b23d331
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -754,8 +754,8 @@ apiVersion: v1
kind: policy
spec:
name: Automatic login disabled (macOS)
query: SELECT 1 FROM managed_policies WHERE domain = 'com.apple.loginwindow' AND name = 'com.apple.login.mcx.DisableAutoLoginClient' AND value = 1 LIMIT 1;
description: "Checks that a mobile device management (MDM) solution configures the Mac to prevent login in without a password."
query: SELECT 1 FROM managed_policies WHERE domain = 'com.apple.loginwindow' AND name = 'DisableFDEAutoLogin' AND value = 1 LIMIT 1;
description: "Checks that a mobile device management (MDM) solution configures the Mac to prevent login in without a password. Note: This policy will not report a value if FileVault is disabled."
resolution: "Contact your IT administrator to ensure your Mac is receiving a profile that disables automatic login."
tags: MDM required, compliance, hardening, built-in, critical
platform: darwin
Expand Down

0 comments on commit b23d331

Please sign in to comment.