Check: APPL-14-002017
Apple macOS 14 (Sonoma) STIG:
APPL-14-002017
(in versions v2 r1 through v1 r1)
Title
The macOS system must disable the camera. (Cat II impact)
Discussion
macOS must be configured to disable the camera.
Check Content
Verify the macOS system is configured to disable the camera with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowCamera').js EOS If the result is not "false", this is a finding.
Fix Text
Configure the macOS system to disable the camera by installing the "com.apple.applicationaccess" configuration profile.
Additional Identifiers
Rule ID: SV-259492r958478_rule
Vulnerability ID: V-259492
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000381 |
Configure the system to provide only organization-defined mission essential capabilities. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-7 |
Least Functionality |