Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-81487 | AOSX-13-000075 | SV-96201r1_rule | Medium |
Description |
---|
IR kernel support must be disabled to prevent users from controlling the system with IR devices. By default, if IR is enabled, the system will accept IR control from any remote device. |
STIG | Date |
---|---|
Apple OS X 10.13 Security Technical Implementation Guide | 2019-07-01 |
Check Text ( C-81235r1_chk ) |
---|
To check if IR support is disabled, run the following command: /usr/bin/sudo /usr/bin/defaults read /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled If the result is not "0", this is a finding. |
Fix Text (F-88311r1_fix) |
---|
To disable IR, run the following command: /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool FALSE |