Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The macOS system must have unused network devices disabled.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-81715 | AOSX-13-001235 | SV-96429r1_rule | Medium |
| Description |
|---|
| If an unused network device is left enabled, a user might be able to activate it at a later time. Unused network devices should be disabled. |
| STIG | Date |
|---|---|
| Apple OS X 10.13 Security Technical Implementation Guide | 2018-10-01 |
Details
| Check Text ( C-81495r1_chk ) |
|---|
| To list the network devices that are enabled on the system, run the following command: /usr/bin/sudo /usr/sbin/networksetup -listallnetworkservices A disabled device will have an asterisk in front of its name. If any listed device that is not in use is missing this asterisk, this is a finding. |
| Fix Text (F-88563r1_fix) |
|---|
| To disable a network device, run the following command, substituting the name of the device in place of "' /usr/bin/sudo /usr/sbin/networksetup -setnetworkserviceenabled ' |