macOS 10.9 / 10.10 / 10.11 / 10.12 / 10.13 / 10.14
{
'class' : 'evaluate-mechanisms',
'comment' : 'Login mechanism based rule. Not for general use, yet.',
'mechanisms' : [
'builtin:policy-banner',
'loginwindow:login',
'builtin:login-begin',
'builtin:reset-password,privileged',
'loginwindow:FDESupport,privileged',
'builtin:forward-login,privileged',
'builtin:auto-login,privileged',
'builtin:authenticate,privileged',
'PKINITMechanism:auth,privileged',
'builtin:login-success',
'loginwindow:success',
'HomeDirMechanism:login,privileged',
'HomeDirMechanism:status',
'MCXMechanism:login',
'CryptoTokenKit:login',
'loginwindow:done'
],
'shared' : 'true',
'tries' : '10000',
'version' : '7'
}
macOS 10.6
{
'class' : 'evaluate-mechanisms',
'comment' : 'Login mechanism based rule. Not for general use, yet.',
'mechanisms' : [
'builtin:smartcard-sniffer,privileged',
'loginwindow:login',
'builtin:reset-password,privileged',
'builtin:auto-login,privileged',
'builtin:authenticate,privileged',
'loginwindow:success',
'HomeDirMechanism:login,privileged',
'HomeDirMechanism:status',
'MCXMechanism:login',
'loginwindow:done'
]
}
macOS 10.7
{
'class' : 'evaluate-mechanisms',
'comment' : 'Login mechanism based rule. Not for general use, yet.',
'mechanisms' : [
'builtin:policy-banner',
'loginwindow:login',
'builtin:reset-password,privileged',
'builtin:forward-login,privileged',
'builtin:auto-login,privileged',
'builtin:authenticate,privileged',
'PKINITMechanism:auth,privileged',
'loginwindow:success',
'HomeDirMechanism:login,privileged',
'HomeDirMechanism:status',
'MCXMechanism:login',
'loginwindow:done'
]
}
macOS 10.8
{
'class' : 'evaluate-mechanisms',
'comment' : 'Login mechanism based rule. Not for general use, yet.',
'mechanisms' : [
'builtin:policy-banner',
'loginwindow:login',
'builtin:login-begin',
'builtin:reset-password,privileged',
'builtin:forward-login,privileged',
'builtin:auto-login,privileged',
'builtin:authenticate,privileged',
'PKINITMechanism:auth,privileged',
'builtin:login-success',
'loginwindow:success',
'HomeDirMechanism:login,privileged',
'HomeDirMechanism:status',
'MCXMechanism:login',
'loginwindow:done'
]
}