Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-67495 | AOSX-11-000065 | SV-81985r1_rule | Low |
Description |
---|
The Bluetooth kernel extension must be disabled, as wireless access introduces unnecessary security risks. Disabling Bluetooth support with a configuration profile mitigates this risk. |
STIG | Date |
---|---|
Apple OS X 10.11 Security Technical Implementation Guide | 2017-04-06 |
Check Text ( C-68059r1_chk ) |
---|
If Bluetooth connectivity is required to facilitate use of approved external devices, this is not applicable. To check if Bluetooth is disabled, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableBluetooth If there is no result, or if "DisableBluetooth" is not set to "1", this is a finding. |
Fix Text (F-73609r1_fix) |
---|
This setting is enforced using the "Bluetooth Policy" configuration profile. |