Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-75965 | AOSX-12-000065 | SV-90653r1_rule | Low |
Description |
---|
The Bluetooth kernel extension must be disabled, as wireless access introduces unnecessary security risks. Disabling Bluetooth support with a configuration profile mitigates this risk. |
STIG | Date |
---|---|
Apple OS X 10.12 Security Technical Implementation Guide | 2018-04-09 |
Check Text ( C-75649r1_chk ) |
---|
If Bluetooth connectivity is required to facilitate use of approved external devices, this is not applicable. To check if Bluetooth is disabled, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableBluetooth If there is no result, or if "DisableBluetooth" is not set to "1", this is a finding. |
Fix Text (F-82603r1_fix) |
---|
This setting is enforced using the "Bluetooth Policy" configuration profile. |