STIG V-268521 | The macOS system must disable Content...

macOS 15 - Sequoia

The macOS system must disable Content Caching service

STIG ID: APPL-15-002140 | SRG: SRG-OS-000095-GPOS-00049 | Severity: Medium | CCI: CCI-000381 | Vulnerability ID: V-268521

Description

Content Caching must be disabled.Content Caching is a macOS service that helps reduce internet data usage and speed up software installation on Mac computers. It is not recommended for devices furnished to employees to act as a caching server.

Check

C-268521r1034503_chk

Verify the macOS system is configured to disable Content Caching service with the following command:/usr/bin/osascript -l JavaScript << EOS$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\.objectForKey('allowContentCaching').jsEOSIf the result is not "false", this is a finding.

Fix

F-72452r1034502_fix

Configure the macOS system to disable Content Caching service by installing the "com.apple.applicationaccess" configuration profile.