Check: AIOS-16-014600
Apple iOS/iPadOS 16 STIG:
AIOS-16-014600
(in version v1 r1)
Title
Apple iOS/iPadOS 16 must disable copy/paste of data from managed to unmanaged applications. (Cat II impact)
Discussion
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoD sensitive information. SFR ID: FMT_SMF_EXT.1.1 #47
Check Content
Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the iOS management tool, verify "Require managed pasteboard" is set to "True". If "Require managed pasteboard" is not set to "True", this is a finding.
Fix Text
Configure the Apple iOS configuration profile to disable copy/paste of data from managed to unmanaged applications. The procedure for implementing this control will vary depending on the MDM/EMM used by the mobile service provider. In the MDM console, set "Require managed pasteboard" to "True".
Additional Identifiers
Rule ID: SV-254640r862234_rule
Vulnerability ID: V-254640
Group Title: PP-MDF-990000
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000097 |
The organization restricts or prohibits the use of organization-controlled portable storage devices by authorized individuals on external information systems. |
| CCI-000366 |
The organization implements the security configuration settings. |
| CCI-000370 |
The organization employs automated mechanisms to centrally manage configuration settings for organization-defined information system components. |