Files
macos_security/rules/os/os_safari_reader_summary_disable.yaml
Bob Gendler f0b2e8bb60 Added CCEs
2025-03-31 15:03:40 -04:00

53 lines
1.1 KiB
YAML

id: os_safari_reader_summary_disable
title: Disable Apple Intelligence Safari Reader Summary
discussion: |-
Apple Intelligence features such as Safari Reader Summary that use off device AI _MUST_ be disabled.
check: |
/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\
.objectForKey('allowSafariSummary').js
EOS
result:
string: 'false'
fix: |
This is implemented by a Configuration Profile.
references:
cce:
- CCE-94570-9
cci:
- CCI-000381
- CCI-001774
srg:
- SRG-OS-000095-GPOS-00049
disa_stig:
- N/A
800-53r5:
- AC-20
- AC-20(1)
- CM-7
- CM-7(1)
- SC-7(10)
800-171r3:
- 03.01.20
- 03.04.06
cmmc:
- AC.L1-3.1.20
- CM.L2-3.4.6
- CM.L2-3.4.7
macOS:
- '15.4'
tags:
- 800-53r5_low
- 800-53r5_moderate
- 800-53r5_high
- 800-171
- cnssi-1253_low
- cnssi-1253_high
- cmmc_lvl2
- cmmc_lvl1
- cnssi-1253_moderate
mobileconfig: true
mobileconfig_info:
com.apple.applicationaccess:
allowSafariSummary: false