The macOS system must prevent AdminHostInfo from being available at LoginWindow.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-268425	APPL-15-000009	SV-268425r1034215_rule	CCI-000060	medium
Description
The system must be configured to not display sensitive information at the LoginWindow. The key AdminHostInfo, when configured, will allow the HostName, IP Address, and operating system version and build to be displayed.
STIG			Date
Apple macOS 15 (Sequoia) Security Technical Implementation Guide			2026-02-06

Related Frameworks

1 mapping across 4 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

IAC-24.1Pattern-Hiding Displays

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2equal to

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (15) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-11Device Lock

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AC-11(1)Pattern-hiding Displays

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AC-12Session Termination

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

AU-10Non-repudiation

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-11Re-authentication

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-2Identification and Authentication (Organizational Users)

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-2(1)Multi-factor Authentication to Privileged Accounts

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-2(12)Acceptance of PIV Credentials

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-2(2)Multi-factor Authentication to Non-privileged Accounts

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

IA-2(3)Local Access to Privileged Accounts

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

+5 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.10

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
NIST SP 800-171 Rev 2, Appendix DRev 2 (Feb 2020, errata Jan 2021)equal to(normalised)

CCI1 mapping

CCI-000060

1.00

DISA STIG Benchmark (XCCDF)V1R7intersects(normalised)

Details

Check Text (C-268425r1034215_chk)

Verify the macOS system is configured to prevent AdminHostInfo from being available at LoginWindow with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow')\ .objectIsForcedForKey('AdminHostInfo') EOS If the result is not "false", this is a finding.

Fix Text (F-72356r1034214_fix)

Configure the macOS system to prevent AdminHostInfo from being available at LoginWindow by installing the "com.apple.loginwindow" configuration profile.