Check: OSX8-00-00430
Apple OSX 10.8 STIG:
OSX8-00-00430
(in version v1 r2)
Title
The Security assessment policy subsystem must be enabled. (Cat I impact)
Discussion
Any changes to the hardware, software, and/or firmware components of the information system and/or application can potentially have significant effects on the overall security of the system. Accordingly, software defined by the organization as critical software must be signed with a certificate that is recognized and approved by the organization.
Check Content
To check the status of the Security assessment policy subsystem, run the following command: sudo spctl --status | grep enabled If nothing is returned, this is a finding.
Fix Text
To enable the Security assessment policy subsystem, run the following command: sudo spctl --master-enable
Additional Identifiers
Rule ID: SV-65865r1_rule
Vulnerability ID: V-51655
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000352 |
The information system prevents the installation of organization-defined critical software programs that are not signed with a certificate that is recognized and approved by the organization. |
Controls
Number | Title |
---|---|
No controls are assigned to this check |