[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

254492

 
 

909

 
 

198541

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-99131-5

Platform: cpe:/o:apple:mac_os_12Date: (C)2022-05-31   (M)2023-07-04



It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. Operating systems are capable of providing a wide variety of functions and services. Some of the functions and services, provided by default, may not be necessary to support essential organizational operations (e.g., key missions, functions). Examples of non-essential capabilities include but are not limited to games, software packages, tools, and demonstration software not related to requirements or providing a wide array of functionality not required for every mission but that cannot be disabled. Siri and dictation must be disabled. Fix: /usr/bin/defaults write /Users/$USER/Library/Preferences/com.apple.Siri "StatusMenuVisible" -bool false


Parameter:

[yes/no]


Technical Mechanism:

/usr/bin/defaults write /Users/$USER/Library/Preferences/com.apple.Siri "StatusMenuVisible" -bool false

CCSS Severity:CCSS Metrics:
CCSS Score : 7.3Attack Vector: LOCAL
Exploit Score: 2.5Attack Complexity: LOW
Impact Score: 4.7Privileges Required: NONE
Severity: HIGHUser Interaction: NONE
Vector: AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:HScope: UNCHANGED
 Confidentiality: LOW
 Integrity: LOW
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:80564


OVAL    1
oval:org.secpod.oval:def:80564
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_12

© SecPod Technologies