Detections
Analytics

1.151 APPL-14-005090

Information

The macOS system must authorize USB devices before allowing connection.

GROUP ID: V-259572RULE ID: SV-259572r986236

USB devices connected to a Mac must be authorized.

[IMPORTANT]

This feature is removed if a smart card is paired or smart card attribute mapping is configured.

Solution

Configure the macOS system to authorize USB devices before allowing connection by installing the "com.apple.applicationaccess" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/24070

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3, CAT|II, CCI|CCI-001958, CCI|CCI-003959, Rule-ID|SV-259572r986236_rule, STIG-ID|APPL-14-005090, Vuln-ID|V-259572

Plugin: Unix

Control ID: f0421176412597aecab9c8a09f44134134ac6384a41e1c82ca7a1cfc2d1ada3b