The macOS system must disable Erase Content and Settings.
An XCCDF Rule
Description
Erase Content and Settings must be disabled. Without disabling the Erase Content and Settings configuration, forensics data could be lost if this feature is activated on a compromised system.
- ID
- SV-268564r1034632_rule
- Version
- APPL-15-005061
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the macOS system to disable Erase Content and Settings by installing the "com.apple.applicationaccess" configuration profile.