Administrator accounts must be created with difficult-to-guess names.

From Apple OS X 10.8 (Mountain Lion) Workstation STIG

Associated with: CCI-000366

SV-65467r1_rule Administrator accounts must be created with difficult-to-guess names.

Vulnerability discussion

Check content

To list all of the administrator accounts on the system, run the following command: sudo dscl . -read /Groups/admin GroupMembership If any of the resulting accounts contain easy-to-guess names, this is a finding. An example of an easy to guess name would contain "admin" or "administrator".

Fix text

Rename any accounts on the system that contain easy to guess names.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.