STIG V-277148 | The macOS system must disable passwor...

The macOS system must disable password hints

STIG ID: APPL-26-003012 | SRG: SRG-OS-000079-GPOS-00047 | Severity: Medium | CCI: CCI-000206 | Vulnerability ID: V-277148

Password hints must be disabled.

Password hints leak information about passwords that are currently in use and can lead to loss of confidentiality.

C-81303r1148894_chk

Verify the macOS system is configured to disable password hints with the following command:

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow')\
.objectForKey('RetriesUntilHint').js
EOS

If the result is not "0", this is a finding.

F-81208r1148895_fix

Configure the macOS system to disable password hints by installing the "com.apple.loginwindow" configuration profile.