BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

system_settings_wifi_disable Disable Wi-Fi Interface

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Disable Wi-Fi Interface

Control

/usr/sbin/networksetup -listallnetworkservices | /usr/bin/grep -c "*Wi-Fi"

Discussion

The macOS system must be configured with Wi-Fi support software disabled if not connected to an authorized trusted network.

Allowing devices and users to connect to or from the system without first authenticating them allows untrusted access and can lead to a compromise or attack. Since wireless communications can be intercepted it is necessary to use encryption to protect the confidentiality of information in transit. Wireless technologies include for example microwave packet radio (UHF/VHF) 802.11x and Bluetooth. Wireless networks use authentication protocols (e.g. EAP/TLS PEAP) which provide credential protection and mutual authentication.

NOTE: If the system requires Wi-Fi to connect to an authorized network, this is not applicable.

Related controls

ac-18, ac-18.1, ac-18.3, ac-4

Fix

To disable Wi-Fi on a macOS system, run the following command.
[source,bash]
----
/usr/sbin/networksetup -setnetworkserviceenabled "Wi-Fi" off
----