STIGQter STIGQter: STIG Summary: Apple macOS 11 (Big Sur) Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 23 Apr 2021:

The macOS system must be configured to disable the application Mail.

DISA Rule

SV-230803r599842_rule

Vulnerability Number

V-230803

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

APPL-11-002019

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

This setting is enforced using the "Restrictions Policy" configuration profile.

Check Contents

To check if there is a configuration policy defined for "Application Restrictions", run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep -A 5 familyControlsEnabled | grep "Mail"

If the return does not contain "/System/Applications/Mail.app/Contents/MacOS/Mail", this is a finding.

Vulnerability Number

V-230803

Documentable

False

Rule Version

APPL-11-002019

Severity Override Guidance

To check if there is a configuration policy defined for "Application Restrictions", run the following command:

/usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep -A 5 familyControlsEnabled | grep "Mail"

If the return does not contain "/System/Applications/Mail.app/Contents/MacOS/Mail", this is a finding.

Check Content Reference

M

Target Key

5246

Comments