Apple OS X 10.13 Security Technical Implementation Guide

The Apple OS X 10.13 Security Technical Implementation Guide (V2 R5) has 135 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

135STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R5

CurrentPublished Wed Apr 27 2022

The macOS system must have unused network devices disabled.

Apple OS X 10.13 Security Technical Implementation Guide

Assessment Title

Rule Text

The macOS system must have unused network devices disabled.

Description

Discussion Text

If an unused network device is left enabled, a user might be able to activate it at a later time. Unused network devices should be disabled.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-214917

Rule

SV-214917r609363_rule

Severity

medium

Rule Version

AOSX-13-001235

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To list the network devices that are enabled on the system, run the following command:

/usr/bin/sudo /usr/sbin/networksetup -listallnetworkservices

A disabled device will have an asterisk in front of its name.

If any listed device that is not in use is missing this asterisk, this is a finding.

Implementation Procedure

Fix Text

To disable a network device, run the following command, substituting the name of the device in place of "'<networkservice>'":

/usr/bin/sudo /usr/sbin/networksetup -setnetworkserviceenabled '<networkservice>' off

STIG check 112 of 135 in the Apple OS X 10.13 STIG checklist

← Previous · V-214916The macOS system must not process Internet Control Message Protocol [ICMP] timestamp requests.Next · V-214918 →The macOS system must be configured to disable Internet Sharing.