STIGQter: STIG Summary: Apple macOS 15 (Sequoia) Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Apr 2026:

The macOS system must configure sudoers timestamp type.

DISA Rule

SV-274880r1099901_rule

Vulnerability Number

V-274880

Group Title

SRG-OS-000373-GPOS-00156

Rule Version

APPL-15-004060

Severity

CAT II

CCI(s)

• CCI-004895 - Permit users to invoke the trusted communications path for communications between the user and the organization-defined security functions, including at a minimum, authentication and re-authentication.

Weight

10

Fix Recommendation

Configure the macOS system with sudoers timestamp type with the following command:

/usr/bin/find /etc/sudoers* -type f -exec sed -i '' '/timestamp_type/d; /!tty_tickets/d' '{}' \;

Check Contents

Verify the macOS system is configured with sudoers timestamp type with the following command:

/usr/bin/sudo /usr/bin/sudo -V | /usr/bin/awk -F": " '/Type of authentication timestamp record/{print $2}'

If the result is not "tty", this is a finding.

Vulnerability Number

V-274880

Documentable

False

Rule Version

APPL-15-004060

Severity Override Guidance

Verify the macOS system is configured with sudoers timestamp type with the following command:

/usr/bin/sudo /usr/bin/sudo -V | /usr/bin/awk -F": " '/Type of authentication timestamp record/{print $2}'

If the result is not "tty", this is a finding.

Check Content Reference

M

Target Key

5661