A password must be required to unlock each System Preference Pane.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Part of OSX00430-Require password to unlock System Panes

Associated with IA controls: ECSC-1

SV-37254r1_rule A password must be required to unlock each System Preference Pane.

Vulnerability discussion

Some system preferences are unlocked when logged in with an administrator account. By requiring a password, digital token, smart card, or biometric reader to unlock secure system preferences, this requires extra authentication.

Check content

1. Open System Preferences->Security. 2. Select General tab. 3. Ensure "Require password to unlock each System Preferences Pane" is checked. If option is not checked, this is a finding.

Fix text

1. Open System Preferences->Security. 2. Select General tab. 3. Select "Require password to unlock each System Preferences Pane".

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.