usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-03 17:02:01 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

changes to wifi disable

Browse Source
This commit is contained in:
Bob Gendler
2021-07-14 14:23:52 -04:00
parent e96cdd747b
commit 99babbaa6e
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
rules/sysprefs/sysprefs_wifi_disable.yaml
View File

@@ -1,7 +1,7 @@
id: sysprefs_wifi_disable
title: "Disable Wi-Fi Interface"
discussion: |
The macOS system must be configured with Wi-Fi support software disabled.
The macOS system must be configured with Wi-Fi support software disabled if not connected to an authorized trusted network.
Allowing devices and users to connect to or from the system without first authenticating them allows untrusted access and can lead to a compromise or attack. Since wireless communications can be intercepted it is necessary to use encryption to protect the confidentiality of information in transit.Wireless technologies include for example microwave packet radio (UHF/VHF) 802.11x and Bluetooth. Wireless networks use authentication protocols (e.g. EAP/TLS PEAP) which provide credential protection and mutual authentication.
@@ -11,7 +11,11 @@ check: |
result:
integer: 1
fix: |
To disable Wi-Fi on a macOS system, run the following command.
[source,bash]
----
/usr/sbin/networksetup -setnetworkserviceenabled "Wi-Fi" off
----
references:
cce:
- CCE-85473-7
@@ -38,6 +42,14 @@ macOS:
- "11.0"
tags:
- stig
- manual
- cnssi-1253
- 800-53r4_low
- 800-53r4_moderate
- 800-53r4_high
- 800-53r5_low
- 800-53r5_moderate
- 800-53r5_high
severity: "medium"
mobileconfig: false
mobileconfig_info: