1.90 APPL-14-002062

Information

The macOS system must disable Bluetooth when no approved device is connected.

GROUP ID: V-259510RULE ID: SV-259510r958908

The macOS system must be configured to disable Bluetooth unless an approved device is connected.

[IMPORTANT]

Information system security officers (ISSOs) may make the risk-based decision not to disable Bluetooth to maintain necessary functionality, but they are advised to first fully weigh the potential risks posed to their organization.

Satisfies: SRG-OS-000423-GPOS-00187,SRG-OS-000481-GPOS-00481

Solution

Configure the macOS system to disable Bluetooth by installing the "com.apple.MCXBluetooth" configuration profiles.

See Also

https://workbench.cisecurity.org/benchmarks/24070