Detections
Analytics
AOSX-15-005051 - The macOS system must restrict the ability to utilize external writable media devices.
Information
External writeable media devices must be disabled for users. External USB devices are a potential vector for malware and can be used to exfiltrate sensitive data.NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
This setting is enforced using the 'Restrictions Policy' configuration profile.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_OS_X_10-15_V1R10_STIG.zip
Item Details
Audit Name: DISA STIG Apple Mac OSX 10.15 v1r10
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-250321r832919_rule, STIG-ID|AOSX-15-005051, Vuln-ID|V-250321
Plugin: Unix
Control ID: 3e25414995cf023441efac242c2e088757697e3242579de9e1c14331fdba4f74