Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-81483 | AOSX-13-000065 | SV-96197r1_rule | Low |
Description |
---|
The Bluetooth kernel extension must be disabled, as wireless access introduces unnecessary security risks. Disabling Bluetooth support with a configuration profile mitigates this risk. |
STIG | Date |
---|---|
Apple OS X 10.13 Security Technical Implementation Guide | 2018-10-01 |
Check Text ( C-81231r1_chk ) |
---|
If Bluetooth connectivity is required to facilitate use of approved external devices, this is not applicable. To check if Bluetooth is disabled, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep DisableBluetooth If the return is null or is not "DisableBluetooth = 1", this is a finding. |
Fix Text (F-88307r1_fix) |
---|
This setting is enforced using the "Bluetooth Policy" configuration profile. |