Disable Automatic Actions for Blank DVDs Applications should not be configured to launch automatically when a disk is inserted. This potentially circumvents anti virus software and allows malicious users to craft disks that can exploit user applications. Disabling Automatic Actions for blank DVDs mitigates this risk.

[yes/no]

To check if the system has the correct setting for blank DVDs in the configuration profile, run the following command: system_profiler SPConfigurationProfileDataType | grep 'com.apple.digihub.blank.dvd.appeared' | grep 'action' | awk '{ print $3 }' | sed 's/;//' The check should return a value of '1'. If this is not defined or not set to '1', this is a finding.