The macOS system must restrict the ability of individuals to use USB storage devices.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-214892 | AOSX-13-000850 | SV-214892r609363_rule | Medium |
| Description |
|---|
| External hard drives, such as USB, must be disabled for users. USB hard drives are a potential vector for malware and can be used to exfiltrate sensitive data if an approved data-loss prevention (DLP) solution is not installed. |
| STIG | Date |
|---|---|
| Apple OS X 10.13 Security Technical Implementation Guide | 2021-11-19 |
Details
| Check Text ( C-16092r397248_chk ) |
|---|
| If an approved HBSS DCM/DLP solution is installed, this is not applicable. To verify external USB drives are disabled, run the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep -A 3 harddisk-external If the result is not “harddisk-external" = ( eject, alert );”, this is a finding. |
| Fix Text (F-16090r397249_fix) |
|---|
| This setting is enforced using the "Restrictions Policy" configuration profile. |