Apple OS X 10.13 Security Technical Implementation Guide

The Apple OS X 10.13 Security Technical Implementation Guide (V2 R5) has 135 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

135STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Wed Apr 27 2022

The macOS system must be configured to not allow iTunes file sharing.

Apple OS X 10.13 Security Technical Implementation Guide

Assessment Title

Rule Text

The macOS system must be configured to not allow iTunes file sharing.

Description

Discussion Text

Connections to unauthorized iOS devices (e.g., iPhones, iPods, and iPads) open the system to possible compromise via exfiltration of system data. Disabling the iTunes file sharing blocks connections to iOS devices.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214893

Rule

SV-214893r609363_rule

Severity

medium

Rule Version

AOSX-13-000862

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If iTunes file sharing is enabled, unauthorized disclosure could occur.

To verify that iTunes file sharing is disabled, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep allowiTunesFileSharing

If the result is null or is not "allowiTunesFileSharing = 0", this is a finding

Implementation Procedure

Fix Text

This setting is enforced using the "Restrictions Policy" configuration profile.

STIG check 88 of 135 in the Apple OS X 10.13 STIG checklist

← Previous · V-214892The macOS system must restrict the ability of individuals to use USB storage devices.Next · V-214894 →The macOS system must not allow an unattended or automatic logon to the system.