Check: AOSX-11-000075
Apple OS X 10-11 STIG:
AOSX-11-000075
(in versions v1 r6 through v1 r3)
Title
Infrared [IR] support must be disabled. (Cat II impact)
Discussion
Infrared [IR] kernel support must be disabled to prevent users from controlling the system with IR devices. By default, if IR is enabled, the system will accept IR control from any remote.
Check Content
To check if IR support is disabled, run the following command: /usr/bin/sudo /usr/bin/defaults read /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled If the result is not "0", this is a finding.
Fix Text
To disable IR, run the following command: /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool FALSE
Additional Identifiers
Rule ID: SV-81989r1_rule
Vulnerability ID: V-67499
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |