CCE-91796-3| Platform: macosx10.13 | Date: (C)2018-02-22 (M)2022-10-10 |
Disable the Prompt for Apple ID and iCloud
The prompt for Apple ID and iCloud must be disabled, as it might mislead new users into creating unwanted Apple IDs and iCloud storage accounts upon their first login.
Parameter:
DidSeeCloudSetup=enable/disable, LastSeenCloudProductVersion
Technical Mechanism:
To check if the prompt for Apple ID and iCloud are disabled for new users, run the following command:
sudo defaults read /System/Library/User\ Template/English.lproj/Library/Preferences/com.apple.SetupAssistant
If there is no result, or the results do not include 'DidSeeCloudSetup = 1 AND LastSeenCloudProductVersion = 10.9', this is a finding.
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| NIST | CM-6 b |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:44301 |
