mirror of
https://github.com/usnistgov/macos_security.git
synced 2026-02-03 05:53:24 +00:00
44 lines
1.1 KiB
YAML
44 lines
1.1 KiB
YAML
id: icloud_appleid_preference_pane_disable
|
|
title: "Disable the Preference Pane for Apple ID"
|
|
discussion: |
|
|
This is required for compliance with the DISA STIG for macOS.
|
|
|
|
The domain *com.apple.systempreferences* has been deprecated by Apple in macOS 13. The recommended way to disable System Setting Panes is to use the *DisabledSystemSettings* key.
|
|
|
|
link:https://developer.apple.com/documentation/devicemanagement/systempreferences[]
|
|
check: |
|
|
/usr/bin/profiles show -output stdout-xml | /usr/bin/xmllint --xpath '//key[text()="DisabledPreferencePanes"]/following-sibling::*[1]' - | /usr/bin/grep -c "com.apple.preferences.AppleIDPrefPane"
|
|
result:
|
|
integer: 1
|
|
fix: |
|
|
This is implemented by a Configuration Profile.
|
|
references:
|
|
cce:
|
|
- CCE-92741-8
|
|
cci:
|
|
- CCI-001774
|
|
800-53r5:
|
|
- N/A
|
|
800-53r4:
|
|
- N/A
|
|
srg:
|
|
- SRG-OS-000370-GPOS-00155
|
|
disa_stig:
|
|
- N/A
|
|
800-171r2:
|
|
- N/A
|
|
cis:
|
|
benchmark:
|
|
- N/A
|
|
controls v8:
|
|
- N/A
|
|
macOS:
|
|
- "14.0"
|
|
tags:
|
|
- none
|
|
severity: "high"
|
|
mobileconfig: true
|
|
mobileconfig_info:
|
|
com.apple.systempreferences:
|
|
DisabledPreferencePanes:
|
|
- com.apple.preferences.AppleIDPrefPane |