4.2 Enable 'Show Wi-Fi status in menu bar' - Show Wi-Fi status in menu bar

Information

The Wi-Fi status in the menu bar indicates if the system's wireless internet capabilities are enabled. If so, the system will scan for available wireless networks to connect to. At the time of this revision all computers Apple builds have wireless network capability, which has not always been the case. This control only pertains to systems that have a wireless NIC available. Operating systems running in a virtual environment may not score as expected either.

Rationale:

Enabling 'Show Wi-Fi status in menu bar' is a security awareness method that helps mitigate public area wireless exploits by making the user aware of their wireless connectivity status.

Impact:

The user of the system should have a quick check on their wireless network status available

Solution

Perform the following enable Wi-Fi status in the menu bar:
Graphical Method:

Open System Preferences

Select Network

Select Wi-Fi

Set Show Wi-Fi status in menu bar

Terminal Method:
For each user, run the following to turn the Wi-Fi status on in the menu bar

$ sudo -u <username> defaults write /Users/<username>/Library/Preferences/com.apple.systemuiserver menuExtras -array-add '/System/Library/CoreServices/Menu Extras/AirPort.menu'

example:

$ sudo -u firstuser defaults write /Users/firstuser/Library/Preferences/com.apple.systemuiserver.plist menuExtras -array-add '/System/Library/CoreServices/Menu Extras/AirPort.menu'

Note: If the remediation is run multiple times, multiple instances of the Wi-Fi status will appear after rebooting the system. Command-click and drag the unwanted icons off the menu bar

Additional Information:

AirPort is Apple's marketing name for its 802.11b, g, and n wireless interfaces.

See Also

https://workbench.cisecurity.org/files/3013

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Unix

Control ID: 56cc13280c6ae65e8a12411658006e7610725f38561dd92f67bfc8c594c15431