Audit Game Center Settings

LowLevel 2Manual reviewmacos

Description

With macOS 10.13, Apple has introduced a separate section for Game Center in System Settings. It is possible to log in with the Apple ID and use the iCloud-based Game Center services. Game Center is a feature from Apple that allows users to engage in game-related activities with friends when playing multiplayer games online on the Game Center social network. User profile data such as nickname, contact discovery, and also nearby players may be shared through iCloud. Apple collects information here, such as the games users play and when they play them, all scores and achievements, and the challenges users send and receive. This information is used to track users' high scores, achievements, and challenges and to improve Game Center. The automatic sign in to Game Center with AppleID should be disabled if not aligned with organizational rules Personal profile visibility, Finding by Friends...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Graphical Method: Perform the following steps to verify the status of iCloud Game Center service: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has Allow GameCenter set to your organization's requirements Terminal Method: Run the following command to verify that a profile is installed that sets iCloud allow GameCenter setting to your organization's requirements: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowGameCenter').js EOS If the output is false, Game Center is disabled. If the output is true Game Center is enabled. Note: Since the profile method sets a system-wide setting, the individual user audit and/or remediation has been removed. We have included the individual user information in the additional information section for reference only.

How it is fixed

Fix method: Guidance or infrastructure patch

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is allowGameCenter 3. The key should be set <true/>, to allow Game Center, or <false/>, to disable it, based on your organization's requirements

Properties

Operating systems: macos-14
Tags: loggingmacossonoma
Reference: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.14.1 Audit Game Center Settings