Check: AOSX-13-000075
Apple OS X 10.13 STIG:
AOSX-13-000075
(in versions v2 r5 through v1 r1)
Title
The macOS system must be configured with Infrared [IR] support disabled. (Cat II impact)
Discussion
IR kernel support must be disabled to prevent users from controlling the system with IR devices. By default, if IR is enabled, the system will accept IR control from any remote device.
Check Content
To check if IR support is disabled, run the following command: /usr/bin/sudo /usr/bin/defaults read /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled If the result is not "0", this is a finding.
Fix Text
To disable IR, run the following command: /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool FALSE
Additional Identifiers
Rule ID: SV-214814r609363_rule
Vulnerability ID: V-214814
Group Title: SRG-OS-000480-GPOS-00227
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
The organization implements the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |