UCF STIG Viewer Logo

The Bluetooth software driver must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-67495 AOSX-11-000065 SV-81985r1_rule Low
Description
The Bluetooth kernel extension must be disabled, as wireless access introduces unnecessary security risks. Disabling Bluetooth support with a configuration profile mitigates this risk.
STIG Date
Apple OS X 10.11 Security Technical Implementation Guide 2018-01-04

Details

Check Text ( C-68059r1_chk )
If Bluetooth connectivity is required to facilitate use of approved external devices, this is not applicable.

To check if Bluetooth is disabled, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableBluetooth

If there is no result, or if "DisableBluetooth" is not set to "1", this is a finding.
Fix Text (F-73609r1_fix)
This setting is enforced using the "Bluetooth Policy" configuration profile.