Files
macos_security/rules/icloud/icloud_bookmarks_disable.yaml
2020-06-11 17:47:26 -04:00

37 lines
906 B
YAML

id: icloud_bookmarks_disable
title: "Disable iCloud Bookmarks"
discussion: |
The macOS built-in Safari.app bookmark synchronization via the iCloud service must be disabled as it is not an organizationally approved cloud service. Automated bookmark synchronization shall be planned and controlled to approved storage.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'allowCloudBookmarks = 0'
result:
integer: 1
fix: |
This is implemented by a Configuration Profile.
references:
cce:
- CCE-84732-7
cci:
- CCI-000381
- CCI-001774
800-53r4:
- CM-7(a)
- CM-7(5)(b)
srg:
- SRG-OS-000095-GPOS-00049
- SRG-OS-000370-GPOS-00155
disa_stig:
- AOSX-14-002042
macOS:
- "10.15"
tags:
- cnssi-1253
- fisma-low
- fisma-moderate
- fisma-high
- STIG
mobileconfig: true
mobileconfig_info:
com.apple.applicationaccess:
allowCloudBookmarks: false