AIOS-12-012500 - Apple iOS must implement the management setting: enable USB Restricted Mode.

Information

The USB lightning port on an iOS device can be used to access data on the device. The required settings is that this control ensures the iOS device password is entered before a previously trusted USB accessory can connect to the device.

SFR ID: FMT_SMF_EXT.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

If the iOS device is not Supervised, the user must disable 'USB Accessories' on their iOS device. If the iOS device is Supervised, check (enable) 'Allow USB Accessories while device is locked' on the Apple iOS management tool. Note: The label for this configuration setting varies between MDM products. Ensure the setting is configured to disable USB accessory connection unless the device passcode is entered.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS_12_V2R1_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-20(2), 800-53|CM-6(1), 800-53|CM-6b., CAT|II, CCI|CCI-000097, CCI|CCI-000366, CCI|CCI-000370, Rule-ID|SV-237273r859303_rule, STIG-ID|AIOS-12-012500, STIG-Legacy|SV-96555, STIG-Legacy|V-81841, Vuln-ID|V-237273

Plugin: MDM

Control ID: e0eeaf9e39d217f7c92cc8770f5b064551f3e8685608e340cd60debf711f7e9d