mirror of
https://github.com/usnistgov/macos_security.git
synced 2026-02-03 05:53:24 +00:00
60 lines
1.3 KiB
YAML
60 lines
1.3 KiB
YAML
id: os_appleid_prompt_disable
|
|
title: "Disable Apple ID Setup during Setup Assistant"
|
|
discussion: |
|
|
The prompt for Apple ID setup during Setup Assistant _MUST_ be disabled.
|
|
|
|
macOS will automatically prompt new users to set up an Apple ID while they are going through Setup Assistant if this is not disabled, misleading new users to think they need to create Apple ID accounts upon their first login.
|
|
check: |
|
|
/usr/bin/osascript -l JavaScript << EOS
|
|
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\
|
|
.objectForKey('SkipCloudSetup').js
|
|
EOS
|
|
result:
|
|
string: "true"
|
|
fix: |
|
|
This is implemented by a Configuration Profile.
|
|
references:
|
|
cce:
|
|
- CCE-92759-0
|
|
cci:
|
|
- CCI-000381
|
|
800-53r5:
|
|
- AC-20
|
|
800-53r4:
|
|
- AC-20
|
|
srg:
|
|
- SRG-OS-000095-GPOS-00049
|
|
disa_stig:
|
|
- N/A
|
|
800-171r2:
|
|
- 3.1.20
|
|
cis:
|
|
benchmark:
|
|
- N/A
|
|
controls v8:
|
|
- 4.1
|
|
- 4.8
|
|
cmmc:
|
|
- AC.L1-3.1.20
|
|
macOS:
|
|
- "14.0"
|
|
tags:
|
|
- 800-53r5_low
|
|
- 800-53r5_moderate
|
|
- 800-53r5_high
|
|
- 800-53r4_low
|
|
- 800-53r4_moderate
|
|
- 800-53r4_high
|
|
- 800-171
|
|
- cisv8
|
|
- cnssi-1253_moderate
|
|
- cnssi-1253_low
|
|
- cnssi-1253_high
|
|
- cmmc_lvl2
|
|
- cmmc_lvl1
|
|
severity: "medium"
|
|
mobileconfig: true
|
|
mobileconfig_info:
|
|
com.apple.SetupAssistant.managed:
|
|
SkipCloudSetup: true
|