The OS X system must be configured with Bluetooth turned off unless approved by the organization.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-75965	AOSX-12-000065	SV-90653r1_rule		Low

Description
The Bluetooth kernel extension must be disabled, as wireless access introduces unnecessary security risks. Disabling Bluetooth support with a configuration profile mitigates this risk.

STIG	Date
Apple OS X 10.12 Security Technical Implementation Guide	2018-12-24

Details

Check Text ( C-75649r1_chk )
If Bluetooth connectivity is required to facilitate use of approved external devices, this is not applicable. To check if Bluetooth is disabled, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableBluetooth If there is no result, or if "DisableBluetooth" is not set to "1", this is a finding.

Fix Text (F-82603r1_fix)
This setting is enforced using the "Bluetooth Policy" configuration profile.