Files
macos_security/rules/icloud/icloud_photos_disable.yaml
2020-06-11 17:47:26 -04:00

37 lines
841 B
YAML

id: icloud_photos_disable
title: "Disable iCloud Photo Library"
discussion: |
The macOS built-in Photos.app connection to Apple's iCloud service must be disabled. Automated file snychronization shall be planned and controlled to approved storage.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'allowCloudPhotoLibrary = 0'
result:
integer: 1
fix: |
This is implemented by a Configuration Profile.
references:
cce:
- CCE-84738-4
cci:
- CCI-000381
- CCI-001774
800-53r4:
- CM-7(a)
- CM-7(5)(b)
srg:
- SRG-OS-000095-GPOS-00049
- SRG-OS-000370-GPOS-00155
disa_stig:
- AOSX-14-002043
macOS:
- "10.15"
tags:
- cnssi-1253
- fisma-low
- fisma-moderate
- fisma-high
- STIG
mobileconfig: true
mobileconfig_info:
com.apple.applicationaccess:
allowCloudPhotoLibrary: false