system.login.console - Overview of the macOS Authorization Right

macOS 10.9 / 10.10 / 10.11 / 10.12 / 10.13 / 10.14

{
  'class' : 'evaluate-mechanisms',
  'comment' : 'Login mechanism based rule.  Not for general use, yet.',
  'mechanisms' : [
    'builtin:policy-banner',
    'loginwindow:login',
    'builtin:login-begin',
    'builtin:reset-password,privileged',
    'loginwindow:FDESupport,privileged',
    'builtin:forward-login,privileged',
    'builtin:auto-login,privileged',
    'builtin:authenticate,privileged',
    'PKINITMechanism:auth,privileged',
    'builtin:login-success',
    'loginwindow:success',
    'HomeDirMechanism:login,privileged',
    'HomeDirMechanism:status',
    'MCXMechanism:login',
    'CryptoTokenKit:login',
    'loginwindow:done'
  ],
  'shared' : 'true',
  'tries' : '10000',
  'version' : '7'
}

macOS 10.6

{
  'class' : 'evaluate-mechanisms',
  'comment' : 'Login mechanism based rule.  Not for general use, yet.',
  'mechanisms' : [
    'builtin:smartcard-sniffer,privileged',
    'loginwindow:login',
    'builtin:reset-password,privileged',
    'builtin:auto-login,privileged',
    'builtin:authenticate,privileged',
    'loginwindow:success',
    'HomeDirMechanism:login,privileged',
    'HomeDirMechanism:status',
    'MCXMechanism:login',
    'loginwindow:done'
  ]
}

macOS 10.7

{
  'class' : 'evaluate-mechanisms',
  'comment' : 'Login mechanism based rule.  Not for general use, yet.',
  'mechanisms' : [
    'builtin:policy-banner',
    'loginwindow:login',
    'builtin:reset-password,privileged',
    'builtin:forward-login,privileged',
    'builtin:auto-login,privileged',
    'builtin:authenticate,privileged',
    'PKINITMechanism:auth,privileged',
    'loginwindow:success',
    'HomeDirMechanism:login,privileged',
    'HomeDirMechanism:status',
    'MCXMechanism:login',
    'loginwindow:done'
  ]
}

macOS 10.8

{
  'class' : 'evaluate-mechanisms',
  'comment' : 'Login mechanism based rule.  Not for general use, yet.',
  'mechanisms' : [
    'builtin:policy-banner',
    'loginwindow:login',
    'builtin:login-begin',
    'builtin:reset-password,privileged',
    'builtin:forward-login,privileged',
    'builtin:auto-login,privileged',
    'builtin:authenticate,privileged',
    'PKINITMechanism:auth,privileged',
    'builtin:login-success',
    'loginwindow:success',
    'HomeDirMechanism:login,privileged',
    'HomeDirMechanism:status',
    'MCXMechanism:login',
    'loginwindow:done'
  ]
}