Wi-Fi support software must be disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-59541 | AOSX-10-000070 | SV-73971r1_rule | Medium |
| Description |
|---|
| Use of Wi-Fi to connect to unauthorized networks may facilitate the exfiltration of mission data. |
| STIG | Date |
|---|---|
| Apple OS X 10.10 (Yosemite) Workstation Security Technical Implementation Guide | 2017-04-06 |
Details
| Check Text ( C-60311r1_chk ) |
|---|
| If the system requires Wi-Fi to connect to an authorized network, this is not applicable. To check if the Wi-Fi network device is disabled, run the following command: sudo networksetup -listallnetworkservices A disabled device will have an asterisk in front of its name. If the Wi-Fi device is missing this asterisk, this is a finding. |
| Fix Text (F-64951r1_fix) |
|---|
| To disable the Wi-Fi network device, run the following command: sudo networksetup -setnetworkserviceenabled 'Wi-Fi' off |