system.login.console

Authorisation Right in Mac OS X

The system.login.console authorization right appears in the following versions of Mac OS X.

Mac OS X 10.9 / 10.10 / 10.11 / 10.12

  {
    'class' : 'evaluate-mechanisms',
    'comment' : 'Login mechanism based rule.  Not for general use, yet.',
    'mechanisms' : [
      'builtin:policy-banner',
      'loginwindow:login',
      'builtin:login-begin',
      'builtin:reset-password,privileged',
      'builtin:forward-login,privileged',
      'builtin:auto-login,privileged',
      'builtin:authenticate,privileged',
      'PKINITMechanism:auth,privileged',
      'builtin:login-success',
      'loginwindow:success',
      'loginwindow:FDESupport,privileged',
      'HomeDirMechanism:login,privileged',
      'HomeDirMechanism:status',
      'MCXMechanism:login',
      'CryptoTokenKit:login',
      'loginwindow:done'
    ],
    'shared' : 'true',
    'tries' : '10000',
    'version' : '4'
  }

Mac OS X 10.6

  {
    'class' : 'evaluate-mechanisms',
    'comment' : 'Login mechanism based rule.  Not for general use, yet.',
    'mechanisms' : [
      'builtin:smartcard-sniffer,privileged',
      'loginwindow:login',
      'builtin:reset-password,privileged',
      'builtin:auto-login,privileged',
      'builtin:authenticate,privileged',
      'loginwindow:success',
      'HomeDirMechanism:login,privileged',
      'HomeDirMechanism:status',
      'MCXMechanism:login',
      'loginwindow:done'
    ]
  }

Mac OS X 10.7

  {
    'class' : 'evaluate-mechanisms',
    'comment' : 'Login mechanism based rule.  Not for general use, yet.',
    'mechanisms' : [
      'builtin:policy-banner',
      'loginwindow:login',
      'builtin:reset-password,privileged',
      'builtin:forward-login,privileged',
      'builtin:auto-login,privileged',
      'builtin:authenticate,privileged',
      'PKINITMechanism:auth,privileged',
      'loginwindow:success',
      'HomeDirMechanism:login,privileged',
      'HomeDirMechanism:status',
      'MCXMechanism:login',
      'loginwindow:done'
    ]
  }

Mac OS X 10.8

  {
    'class' : 'evaluate-mechanisms',
    'comment' : 'Login mechanism based rule.  Not for general use, yet.',
    'mechanisms' : [
      'builtin:policy-banner',
      'loginwindow:login',
      'builtin:login-begin',
      'builtin:reset-password,privileged',
      'builtin:forward-login,privileged',
      'builtin:auto-login,privileged',
      'builtin:authenticate,privileged',
      'PKINITMechanism:auth,privileged',
      'builtin:login-success',
      'loginwindow:success',
      'HomeDirMechanism:login,privileged',
      'HomeDirMechanism:status',
      'MCXMechanism:login',
      'loginwindow:done'
    ]
  }

See other Mac OS X Authorization Rights.