Check: AOSX-09-000430
Apple OS X 10.9 Workstation STIG:
AOSX-09-000430
(in version v1 r2)
Title
The Security assessment policy subsystem must be enabled. (Cat I impact)
Discussion
Any changes to the hardware, software, and/or firmware components of the information system and/or application can potentially have significant effects on the overall security of the system. Accordingly, software defined by the organization as critical software must be signed with a certificate that is recognized and approved by the organization.
Check Content
To check the status of the Security assessment policy subsystem, run the following command: sudo spctl --status | grep enabled If nothing is returned, this is a finding.
Fix Text
To enable the Security assessment policy subsystem, run the following command: sudo spctl --master-enable
Additional Identifiers
Rule ID: SV-72771r1_rule
Vulnerability ID: V-58341
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001749 |
The information system prevents the installation of organization-defined software components without verification the software component has been digitally signed using a certificate that is recognized and approved by the organization. |
Controls
Number | Title |
---|---|
CM-5 (3) |
Signed Components |