Check: APPL-14-002037
Apple macOS 14 (Sonoma) STIG:
APPL-14-002037
(in versions v1 r2 through v1 r1)
Title
The macOS system must disable iCloud Storage Setup during Setup Assistant. (Cat II impact)
Discussion
The prompt to set up iCloud storage services during Setup Assistant must be disabled. The default behavior of macOS is to prompt new users to set up storage in iCloud. Disabling the iCloud storage setup prompt provides organizations more control over the storage of their data.
Check Content
Verify the macOS system is configured to disable iCloud Storage Setup during Setup Assistant with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\ .objectForKey('SkipiCloudStorageSetup').js EOS If the result is not "true", this is a finding.
Fix Text
Configure the macOS system to disable iCloud Storage Setup during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.
Additional Identifiers
Rule ID: SV-259498r941116_rule
Vulnerability ID: V-259498
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |