Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-59733 | AOSX-10-001125 | SV-74163r1_rule | Medium |
Description |
---|
The prompt for Apple ID and iCloud must be disabled, as it might mislead new users into creating unwanted Apple IDs and iCloud storage accounts upon their first log on. |
STIG | Date |
---|---|
Apple OS X 10.10 (Yosemite) Workstation Security Technical Implementation Guide | 2017-04-06 |
Check Text ( C-60503r1_chk ) |
---|
To check if the prompt for Apple ID and iCloud are disabled for new users, run the following command: sudo defaults read /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant If there is no result, if it prints out that the domain "does not exist", or the results do not include 'DidSeeCloudSetup = 1 AND LastSeenCloudProductVersion = 10.10', this is a finding. |
Fix Text (F-65143r1_fix) |
---|
To ensure that the prompt for Apple ID and iCloud is disabled, run the following commands: sudo defaults write /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant DidSeeCloudSetup -bool TRUE; sudo defaults write /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant LastSeenCloudProductVersion '10.10' |