Check: AOSX-12-000075
Apple OS X 10.12 STIG:
AOSX-12-000075
(in versions v1 r6 through v1 r1)
Title
The OS X system must be configured with Infrared [IR] support disabled. (Cat II impact)
Discussion
IR kernel support must be disabled to prevent users from controlling the system with IR devices. By default, if IR is enabled, the system will accept IR control from any remote device.
Check Content
To check if IR support is disabled, run the following command: /usr/bin/sudo /usr/bin/defaults read /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled If the result is not "0", this is a finding.
Fix Text
To disable IR, run the following command: /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool FALSE
Additional Identifiers
Rule ID: SV-90657r1_rule
Vulnerability ID: V-75969
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |