Ensure Bluetooth Sharing Is Disabled

СреднийУровень 1Автоматическаяmacos

Описание

Bluetooth Sharing allows files to be exchanged with Bluetooth-enabled devices. This setting only disables the receiving of files and requires both devices to be paired through Bluetooth as well as accepted by the receiver. This setting does not disable the ability to send files from the device to another paired Bluetooth device. Bluetooth pairing only requires an acceptance dialog on either device attempting to pair. It does require the Bluetooth pane in System Settings to be open for any macOS device to be discoverable. While it does give a verification code, it does not require either device to enter the code, but just accept the dialog box (on either device). At that point, the two devices are paired and files can be shared through Bluetooth. To receive files through Bluetooth File Exchange application, the user does have to accept the file(s) through a dialog box. Users should onl...

Как проверяется

Метод проверки: Команда оболочки

shell

ul=$(/usr/bin/dscl . -list /Users UniqueID 2>/dev/null) || exit 1
bad=""
for u in $(printf '%s\n' "$ul" | /usr/bin/awk '$2 > 500 {print $1}'); do
  v=$(/usr/bin/sudo -u "$u" /usr/bin/defaults -currentHost read com.apple.Bluetooth PrefKeyServicesEnabled 2>/dev/null)
  [ -n "$v" ] && [ "$v" != 0 ] && bad="$bad $u"
done
if [ -z "$bad" ]; then echo compliant; else echo "Bluetooth Sharing enabled for:$bad"; fi

Ожидаемый вывод: compliant

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Graphical Method: Perform the following steps to disable Bluetooth Sharing: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set Bluetooth Sharing to disabled Terminal Method: Run the following command to disable Bluetooth Sharing is disabled: % /usr/bin/sudo -u <username> /usr/bin/defaults -currentHost write com.apple.Bluetooth PrefKeyServicesEnabled -bool false % /usr/bin/sudo -u firstuser /usr/bin/defaults -currentHost write com.apple.Bluetooth PrefKeyServicesEnabled -bool false

Свойства

Операционные системы: macos-14
Теги: macossonoma
Источник: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.10 Ensure Bluetooth Sharing Is Disabled

Проверить этот хост

Выполните команду на компьютере, аудит которого вам разрешён. Сканирование работает только на чтение.

shell

tmaegis scan --target macos