STIG V-268560 | The macOS system must disable the Scr...

macOS 15 - Sequoia

The macOS system must disable the Screen Time prompt during Setup Assistant

STIG ID: APPL-15-005055 | SRG: SRG-OS-000095-GPOS-00049 | Severity: Medium | CCI: CCI-000381 | Vulnerability ID: V-268560

Description

The prompt for Screen Time setup during Setup Assistant must be disabled. Enabling any service increases the attack surface for an intruder. By disabling unnecessary services, the attack surface is minimized.

Check

C-268560r1034620_chk

Verify the macOS system is configured to disable the Screen Time prompt during Setup Assistant with the following command:/usr/bin/osascript -l JavaScript << EOS$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\.objectForKey('SkipScreenTime').jsEOSIf the result is not "true", this is a finding.

Fix

F-72491r1034619_fix

Configure the macOS system to disable the Screen Time prompt during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.