Detections
Analytics
APPL-12-005051 - The macOS system must restrict the ability to utilize external writeable media devices.
Information
External writeable media devices must be disabled for users. External USB devices are a potential vector for malware and can be used to exfiltrate sensitive data.Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000319-GPOS-00164
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
This setting is enforced using the 'Restrictions Policy' configuration profile.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_12_V1R9_STIG.zip
Item Details
Audit Name: DISA STIG Apple macOS 12 v1r9
Category: CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION
References: 800-53|CM-6b., 800-53|IA-3(1), CAT|II, CCI|CCI-000366, CCI|CCI-001967, Rule-ID|SV-252537r991589_rule, STIG-ID|APPL-12-005051, Vuln-ID|V-252537
Plugin: Unix
Control ID: 9f8d47b2f47a82e1668ab3e2d5361b9ceb8c8d2b2805e16d9b2a07025a51d0da