Apple OS X 10.13 Security Technical Implementation Guide

The Apple OS X 10.13 Security Technical Implementation Guide (V2 R5) has 135 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

135STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Wed Apr 27 2022

The macOS system must be configured with the prompt for Apple ID and iCloud disabled.

Apple OS X 10.13 Security Technical Implementation Guide

Assessment Title

Rule Text

The macOS system must be configured with the prompt for Apple ID and iCloud disabled.

Description

Discussion Text

The prompt for Apple ID and iCloud must be disabled, as it might mislead new users into creating unwanted Apple IDs and iCloud storage accounts upon their first logon.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214905

Rule

SV-214905r609363_rule

Severity

medium

Rule Version

AOSX-13-001125

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To check if the system is configured to skip cloud setup, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep SkipCloudSetup

If "SkipCloudSetup" is not set to "1", this is a finding.

To check if the prompt for "Apple ID" and "iCloud" are disabled for new users, run the following command:

/usr/bin/sudo /usr/bin/defaults read /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant

If there is no result, if it prints out that the domain "does not exist", or the results do not include "DidSeeCloudSetup = 1 AND LastSeenCloudProductVersion = 10.12", this is a finding.

Implementation Procedure

Fix Text

This setting is enforced using the "Login Window Policy" configuration profile.

STIG check 100 of 135 in the Apple OS X 10.13 STIG checklist

← Previous · V-214904The macOS system must be configured with the sticky bit set on all public directories.Next · V-214906 →The macOS system must be configured so that users do not have Apple IDs signed into iCloud.