Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable Internet Sharing.

    &lt;VulnDiscussion&gt;If the system does not require Internet Sharing, support for it is nonessential and must be disabled. The information system...
    Rule Medium Severity
  • SRG-OS-000080-GPOS-00048

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the built-in web server.

    &lt;VulnDiscussion&gt;The built-in web server is a nonessential service built into macOS and must be disabled. NOTE: The built-in web server is di...
    Rule Medium Severity
  • SRG-OS-000080-GPOS-00048

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable AirDrop.

    &lt;VulnDiscussion&gt;AirDrop must be disabled to prevent file transfers to or from unauthorized devices. AirDrop allows users to share and receiv...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable FaceTime.app.

    &lt;VulnDiscussion&gt;The macOS built-in FaceTime.app must be disabled. The FaceTime.app establishes a connection to Apple's iCloud service even w...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the iCloud Calendar services.

    &lt;VulnDiscussion&gt;The macOS built-in Calendar.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provi...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable iCloud Reminders.

    &lt;VulnDiscussion&gt;The macOS built-in Reminders.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not prov...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable iCloud Address Book.

    &lt;VulnDiscussion&gt;The macOS built-in Contacts.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provi...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable iCloud Mail.

    &lt;VulnDiscussion&gt;The macOS built-in Mail.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provide a...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable iCloud Notes.

    &lt;VulnDiscussion&gt;The macOS built-in Notes.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provide ...
    Rule Medium Severity
  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
  • The macOS system must disable the camera.

    &lt;VulnDiscussion&gt;It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission ob...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules