The macOS system must restrict the ability of individuals to write to external optical media.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-257245 | APPL-13-005053 | SV-257245r905368_rule | Low |
| Description |
|---|
| External writeable media devices must be disabled for users. External optical media devices can be used to exfiltrate sensitive data if an approved data-loss prevention (DLP) solution is not installed. |
| STIG | Date |
|---|---|
| Apple macOS 13 (Ventura) Security Technical Implementation Guide | 2023-08-28 |
Details
| Check Text ( C-60930r905366_chk ) |
|---|
| Verify the macOS system is configured to disable writing to external optical media devices with the following command: /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep "BurnSupport" BurnSupport = off; If "BurnSupport" is not set to "off" and is not documented with the Information System Security Officer (ISSO) as an operational requirement, this is a finding. |
| Fix Text (F-60871r905367_fix) |
|---|
| Configure the macOS system to disable writing to external optical media devices by installing the "Restrictions Policy" configuration profile. |