2.6.6 Enable Location Services

Information

macOS uses location information gathered through local Wi-Fi networks to enable applications to supply relevant information to users. Users do not need to change the time or the time zone, the computer will do it for them. They do not need to specify their location for weather or travel times and even get alerts on travel times to meetings and appointment where location information is supplied.

For the purpose of asset management and time and log management with mobile computers location services simplify some processes.

There are some use cases where it is important that the computer not be able to report it's exact location. While the general use case is to enable Location Services, it should not be allowed if the physical location of the computer and the user should not be public knowledge.

https://support.apple.com/en-us/HT204690

Rationale:

Location services are helpful in most use cases and can simplify log and time management where computers change time zones.

Solution

Perform the following to ensure the system is configured as prescribed:

In Terminal, run the following command:

sudo launchctl load /System/Library/LaunchDaemons/com.apple.locationd.plist



There should be no response

In some use cases organizations may not want Location Services running in those cases 'unload' rather than 'load' is the appropriate command
Perform the following to ensure the system is configured as prescribed:

In Terminal, run the following command:

sudo launchctl unload /System/Library/LaunchDaemons/com.apple.locationd.plist



Verify that the results include: Could not find specified service

See Also

https://workbench.cisecurity.org/files/3092

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-8(8)

Plugin: Unix

Control ID: b04487c2a70477ae7c96a07ce1d68a9a1535ae1c1f2e5acc349903513a1c837d