Detections
Analytics

Monterey - Disable Calendar.app

Information

The macOS built-in Calendar.app _MUST_ be disabled as this application can establish a connection to non-approved services. This rule is in place to prevent inadvertent data transfers.

[IMPORTANT]
====
Some organizations allow the use of the built-in Calendar.app for organizational communication. Information System Security Officers (ISSOs) may make the risk-based decision not to disable the macOS built-in Mail.app to avoid losing this functionality, but they are advised to first fully weigh the potential risks posed to their organization.
====

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.applicationaccess.new:
 familyControlsEnabled:
 True
 pathBlackList:
 /Applications/Calendar.app

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-20, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-7a., CCE|CCE-90909-3, CCI|CCI-000381

Plugin: Unix

Control ID: eaf3193661724e0b1ddb1cca4b6b70b5932c3c5fdfd5fe9c079e1cdf4ef11d30