2.4.7 Disable Bluetooth Sharing

Information

Bluetooth Sharing allows files to be exchanged with Bluetooth enabled devices.

Rationale:

Disabling Bluetooth Sharing minimizes the risk of an attacker using Bluetooth to remotely attack the system.

Impact:

Control 2.1.1 discusses disabling Bluetooth if no paired devices exist. There is a general expectation that Bluetooth peripherals will be used by most users in Apple's ecosystem, it is possible that sharing is required and Bluetooth peripherals are not. Bluetooth must be enabled if sharing is an acceptable use case.

Solution

Perform the following to implement the prescribed state:

Open System Preferences

Select Sharing

Uncheck Bluetooth Sharing

See Also

https://workbench.cisecurity.org/files/3092

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Unix

Control ID: d54e9ce3851aee666c1cd0cf6136f86df9b22aee33e08d9f750030e9e81f24ee