BaselineWatch
Desk

system_settings_improve_search_disable Disable Improve Search Information to Apple

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Disable Improve Search Information to Apple

Control

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.assistant.support')\
.objectForKey('Search Queries Data Sharing Status').js
EOS

Discussion

Sending data to Apple to help improve search _MUST_ be disabled. This will disable "Improve Search" within Spotlight in System Settings.

The information system _MUST_ be configured to provide only essential capabilities. Disabling the submission of search data will mitigate the risk of unwanted data being sent to Apple.

Related controls

ac-20, cm-7, cm-7.1, sc-7.10

Fix

This is implemented by a Configuration Profile.