Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The macOS system must restrict the ability of individuals to write to external optical media.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-257245 | APPL-13-005053 | SV-257245r905368_rule | Low |
| Description |
|---|
| External writeable media devices must be disabled for users. External optical media devices can be used to exfiltrate sensitive data if an approved data-loss prevention (DLP) solution is not installed. |
| STIG | Date |
|---|---|
| Apple macOS 13 (Ventura) Security Technical Implementation Guide | 2023-04-12 |
Details
| Check Text ( C-60930r905366_chk ) |
|---|
| Verify the macOS system is configured to disable writing to external optical media devices with the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "BurnSupport" BurnSupport = off; If "BurnSupport" is not set to "off" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding. |
| Fix Text (F-60871r905367_fix) |
|---|
| Configure the macOS system to disable writing to external optical media devices by installing the "Restrictions Policy" configuration profile. |