UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The OS X system must be configured with Bluetooth turned off unless approved by the organization.


Overview

Finding ID Version Rule ID IA Controls Severity
V-75965 AOSX-12-000065 SV-90653r1_rule Low
Description
The Bluetooth kernel extension must be disabled, as wireless access introduces unnecessary security risks. Disabling Bluetooth support with a configuration profile mitigates this risk.
STIG Date
Apple OS X 10.12 Security Technical Implementation Guide 2018-01-04

Details

Check Text ( C-75649r1_chk )
If Bluetooth connectivity is required to facilitate use of approved external devices, this is not applicable.

To check if Bluetooth is disabled, run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableBluetooth

If there is no result, or if "DisableBluetooth" is not set to "1", this is a finding.
Fix Text (F-82603r1_fix)
This setting is enforced using the "Bluetooth Policy" configuration profile.