BaselineWatch
Desk

APPL-15-002160 The macOS system must disable iCloud Game Center.

DISA STIG library V1R8
All changes in this version
first version loaded CAT II

Maps to CM-7 via CCI-000381

Title

The macOS system must disable iCloud Game Center.

Control

Verify the macOS system is configured to disable iCloud Game Center with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowGameCenter').js EOS If the result is not "false", this is a finding.

Discussion

This works only with supervised devices (mobile device management [MDM]) and allows to disable Apple Game Center. The rationale is that Game Center is using Apple ID and will share data on AppleID-based services; therefore, Game Center must be disabled. This setting also prohibits the functionality of adding friends to Game Center.

Related controls

CCI-000381

Fix

Configure the macOS system to disable iCloud Game Center by installing the "com.apple.applicationaccess" configuration profile.