1.116 APPL-15-002270

Information

The macOS system must disable the iCloud Freeform services.

GROUP ID: V-268533
RULE ID: SV-268533r1034539

The macOS built-in Freeform.app connection to Apple's iCloud service must be disabled.

Enabling any service increases the attack surface for an intruder. By disabling unnecessary services, the attack surface is minimized.

Solution

Configure the macOS system to disable iCloud Freeform services by installing the "com.apple.applicationaccess" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/23761