BaselineWatch
Desk

system_settings_wallet_applepay_settings_disable Disable the System Settings Pane for Wallet and Apple Pay

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Disable the System Settings Pane for Wallet and Apple Pay

Control

/usr/bin/profiles show -output stdout-xml | /usr/bin/xmllint --xpath '//key[text()="DisabledSystemSettings"]/following-sibling::*[1]' - | /usr/bin/grep -c "com.apple.WalletSettingsExtension"

Discussion

The System Settings pane for Wallet and Apple Pay _MUST_ be disabled.

Disabling the System Settings pane prevents the users from configuring Wallet and Apple Pay.

Related controls

cm-7, cm-7.1, cm-7.5

Fix

This is implemented by a Configuration Profile.