Title

The macOS system must disable iCloud Game Center. (Cat II impact)

Discussion

This works only with supervised devices (MDM) and allows Apple Game Center to be disabled. The rationale is Game Center is using Apple ID and will share data on AppleID-based services; therefore, Game Center must be disabled. This setting also prohibits the functionality of adding friends to Game Center.

Check Content

Verify the macOS system is configured to disable iCloud Game Center with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowGameCenter').js EOS If the result is not "false", this is a finding.

Fix Text

Configure the macOS system to disable iCloud Game Center by installing the "com.apple.applicationaccess" configuration profile.

Additional Identifiers

Rule ID: SV-259524r958478_rule

Vulnerability ID: V-259524

Group Title: SRG-OS-000095-GPOS-00049

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.