Files
macos_security/rules/os/os_mail_summary_disable.yaml
2025-05-13 11:01:17 -04:00

52 lines
1004 B
YAML

id: os_mail_summary_disable
title: Disable Apple Intelligence Mail Summary
discussion: |-
Apple Intelligence features such as Apple Mail Summary that use off device AI _MUST_ be disabled.
check: |
/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\
.objectForKey('allowMailSummary').js
EOS
result:
string: 'false'
fix: |
This is implemented by a Configuration Profile.
references:
cce:
- CCE-94521-2
cci:
- N/A
800-53r5:
- AC-20
- AC-20(1)
- CM-7
- CM-7(1)
- SC-7(10)
800-171r3:
- 03.01.20
- 03.04.06
cis:
benchmark:
- 2.5.1.3 (level 1)
controls v8:
- N/A
cmmc:
- AC.L1-3.1.20
- CM.L2-3.4.6
- CM.L2-3.4.7
macOS:
- '15.0'
tags:
- 800-53r5_low
- 800-53r5_moderate
- 800-53r5_high
- 800-171
- cmmc_lvl2
- cmmc_lvl1
- cis_lvl1
- cis_lvl2
mobileconfig: true
mobileconfig_info:
com.apple.applicationaccess:
allowMailSummary: false