2.9 Pair the remote control infrared receiver if enabled

Information

An infrared receiver is a piece of hardware that sends information from an infrared remote control to another device by receiving and decoding signals. If a remote is used with a computer, a specific remote, or 'pair', can be set-up to work with the computer. This will allow only the paired remote to work on that computer. If a remote is needed the receiver should only be accessible by a paired device. Many models do not have infrared hardware. The audit check looks for the hardware first.

Rationale:

An infrared remote can be used from a distance to circumvent physical security controls. A remote could also be used to page through a document or presentation, thus revealing sensitive information.

Solution

Perform the following to disable the IR receiver:
Graphical Method:

Open System Preferences

Select Security & Privacy

Select General

Select Advanced

Check Disable remote control infrared receiver

Terminal Method:
Run the following command to disable the IR receiver:

$ sudo defaults write /Library/Preferences/com.apple.driver.AppleIRController DeviceEnabled -bool false

Note: If the computer does not have an onboard IR port the graphical method will not be available. The terminal method should still be ran so that any external IR receivers that allow system control cannot be connected and be enabled.
If you need the IR receiver to be active, perform the following to pair a remote control infrared receiver:

Holding the remote close to the computer, point the remote at the front of the computer.

Pair the Apple Remote.

If you have an Apple Remote with seven buttons, press and hold both the Right and Menu buttons on the remote until the paired-remote icon appears on your screen

If you have an Apple Remote with six buttons, press and hold both the Next and Menu buttons on the remote until the paired-remote icon appears on your screen

See Also

https://workbench.cisecurity.org/files/3013

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-19, 800-53|CM-6b., CSCv6|3.1

Plugin: Unix

Control ID: 23bc2764c3330ec6cae51d58a208ac8d50fd7d9990664775909bc2fc0b810950