Check: APPL-14-002080
Apple macOS 14 (Sonoma) STIG:
APPL-14-002080
(in versions v1 r2 through v1 r1)
Title
The macOS system must disable Airplay Receiver. (Cat II impact)
Discussion
Airplay Receiver allows users to send content from another Apple device to be displayed on the screen as it is being played from another device. Support for Airplay Receiver is nonessential and must be disabled. The information system must be configured to provide only essential capabilities. Satisfies: SRG-OS-000095-GPOS-00049,SRG-OS-000300-GPOS-00118
Check Content
Verify the macOS system is configured to disable Airplay Receiver with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowAirPlayIncomingRequests').js EOS If the result is not "false", this is a finding.
Fix Text
Configure the macOS system to disable Airplay Receiver by installing the "com.apple.applicationaccess" configuration profile.
Additional Identifiers
Rule ID: SV-259516r941170_rule
Vulnerability ID: V-259516
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
| CCI-001443 |
The information system protects wireless access to the system using authentication of users and/or devices. |