Check: APPL-14-002017
Apple macOS 14 (Sonoma) STIG:
APPL-14-002017
(in versions v1 r2 through v1 r1)
Title
The macOS system must disable the camera. (Cat II impact)
Discussion
macOS must be configured to disable the camera.
Check Content
Verify the macOS system is configured to disable the camera with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowCamera').js EOS If the result is not "false", this is a finding.
Fix Text
Configure the macOS system to disable the camera by installing the "com.apple.applicationaccess" configuration profile.
Additional Identifiers
Rule ID: SV-259492r941098_rule
Vulnerability ID: V-259492
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-7 |
Least Functionality |