Administrator accounts must be created with difficult-to-guess names.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Part of OSX00015-Admin accounts with difficult names

Associated with IA controls: IAIA-2, IAIA-1

SV-37153r1_rule Administrator accounts must be created with difficult-to-guess names.

Vulnerability discussion

The administrator account has unlimited privileges to the system. Creating a complex name improves the protection of this account and the system. Do not use administrator; do not use the name of the machine, etc.

Check content

1. Select Finder. 2. Select Applications. 3. Select System Preferences. 4. Select Accounts. 5. Verify there are no easy to guess administrator account names. If any accounts have easy to guess names, this is a finding.

Fix text

1. Select Finder. 2. Select Applications. 3. Select System Preferences. 4. Select Accounts. 5. Rename or recreate accounts with difficult-to-guess names.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.