STIG V-277170 | The macOS system must disable the Scr...

macOS 26 - Tahoe

The macOS system must disable the Screen Time prompt during Setup Assistant

STIG ID: APPL-26-005055 | SRG: SRG-OS-000095-GPOS-00049 | Severity: Medium | CCI: CCI-000381 | Vulnerability ID: V-277170

Description

The prompt for Screen Time setup during Setup Assistant must be disabled.

Enabling any service increases the attack surface for an intruder. By disabling unnecessary services, the attack surface is minimized.

Check

C-81325r1149348_chk

Verify the macOS system is configured to disable the Screen Time prompt during Setup Assistant with the following command:

/usr/bin/osascript -l JavaScript 2>/dev/null << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\
.objectForKey('SkipSetupItems').containsObject("ScreenTime")
EOS

If the result is not "true", this is a finding.

Fix

F-81230r1148961_fix

Configure the macOS system to disable the Screen Time prompt during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.