Title

The macOS system must disable iCloud Game Center. (Cat II impact)

Discussion

This works only with supervised devices (mobile device management [MDM]) and allows to disable Apple Game Center. The rationale is that Game Center is using Apple ID and will share data on AppleID-based services; therefore, Game Center must be disabled. This setting also prohibits the functionality of adding friends to Game Center.

Check Content

Verify the macOS system is configured to disable iCloud Game Center with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowGameCenter').js EOS If the result is not "false", this is a finding.

Fix Text

Configure the macOS system to disable iCloud Game Center by installing the "com.apple.applicationaccess" configuration profile.

Additional Identifiers

Rule ID: SV-268523r1034509_rule

Vulnerability ID: V-268523

Group Title: SRG-OS-000095-GPOS-00049

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.