Check: APPL-15-005058
Apple macOS 15 (Sequoia) STIG:
APPL-15-005058
(in versions v1 r3 through v1 r1)
Title
The macOS system must disable Handoff. (Cat II impact)
Discussion
Handoff must be disabled. Handoff allows users to continue working on a document or project when the user switches from one Apple device to another. Disabling Handoff prevents data transfers to unauthorized devices. Satisfies: SRG-OS-000080-GPOS-00048, SRG-OS-000095-GPOS-00049, SRG-OS-000300-GPOS-00118
Check Content
Verify the macOS system is configured to disable Handoff with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowActivityContinuation').js EOS If the result is not "false", this is a finding.
Fix Text
Configure the macOS system to disable Handoff by installing the "com.apple.applicationaccess" configuration profile.
Additional Identifiers
Rule ID: SV-268562r1034626_rule
Vulnerability ID: V-268562
Group Title: SRG-OS-000080-GPOS-00048
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000213 |
Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies. |
| CCI-000381 |
Configure the system to provide only organization-defined mission essential capabilities. |
| CCI-001443 |
Protect wireless access to the system using authentication of users and/or devices. |