Ensure AirDrop Is Disabled When Not Actively Transferring Files

MediumLevel 1Automatedmacos

Description

AirDrop is Apple's built-in, on-demand, ad hoc file exchange system that is compatible with both macOS and iOS. It uses Bluetooth LE for discovery that limits connectivity to Mac or iOS users that are in close proximity. Depending on the setting, it allows everyone or only Contacts to share files when they are near each other. In many ways, this technology is far superior to the alternatives.

How it is checked

Audit method: Shell command

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowAirDrop').js
EOS

Expected output: false

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.applicationaccess allowAirDrop = <false/>.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.1.1 Ensure AirDrop Is Disabled When Not Actively Transferring Files

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos