Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-67499 | AOSX-11-000075 | SV-81989r1_rule | Medium |
Description |
---|
Infrared [IR] kernel support must be disabled to prevent users from controlling the system with IR devices. By default, if IR is enabled, the system will accept IR control from any remote. |
STIG | Date |
---|---|
Apple OS X 10.11 Security Technical Implementation Guide | 2017-04-06 |
Check Text ( C-68063r1_chk ) |
---|
To check if IR support is disabled, run the following command: /usr/bin/sudo /usr/bin/defaults read /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled If the result is not "0", this is a finding. |
Fix Text (F-73613r1_fix) |
---|
To disable IR, run the following command: /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool FALSE |