adding cis-screensaver.plist

Set idle time of 10mintues/600seconds. Require password within 5
seconds.

ElCapitan_CIS.sh

@@ -152,8 +152,8 @@ systemPreferences() {
         ScriptLogging "  2.3 Desktop & Screen Saver"
 
         # 2.3.1 Set an inactivity interval of 20 minutes or less for the screen saver
-        /usr/bin/defaults -currentHost write com.apple.screensaver idleTime 600 2>&1 >> ScriptLogging
-        # going to move this to a user based configuration profile
+        # /usr/bin/defaults -currentHost write com.apple.screensaver idleTime 600 2>&1 >> ScriptLogging
+        # use cis-screensaver.plist in a configuration profile
 
         # 2.3.2 Secure screen saver corners
         # going to move this to a user based configuration profile

cis-screensaver.plist

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>idleTime</key>
+	<integer>600</integer>
+	<key>askForPasswordDelay</key>
+	<integer>5</integer>
+	<key>askForPassword</key>
+	<integer>1</integer>
+</dict>
+</plist>