The operating system must restrict the ability of individuals to use USB storage devices.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-58399 | AOSX-09-000850 | SV-72829r1_rule | Medium |
| Description |
|---|
| External hard drives, such as USB, must be disabled for users. USB hard drives are a potential vector for malware and can be used to exfiltrate sensitive data. |
| STIG | Date |
|---|---|
| Apple OS X 10.9 (Mavericks) Workstation Security Technical Implementation Guide | 2017-01-05 |
Details
| Check Text ( C-59225r1_chk ) |
|---|
| To ensure external USB drives are disabled, run the following command: system_profiler SPConfigurationProfileDataType | grep -A 3 harddisk-external If the option 'alert' is not set for 'harddisk-external', this is a finding. |
| Fix Text (F-63715r1_fix) |
|---|
| This setting is enforced using a configuration profile. |