The OS X system must be configured with the usbmuxd daemon disabled.

From Apple OS X 10.12 Security Technical Implementation Guide

Associated with: CCI-000366

SV-90791r1_rule The OS X system must be configured with the usbmuxd daemon disabled.

Vulnerability discussion

Connections to unauthorized iOS devices (iPhones, iPods, and iPads) open the system to possible compromise via exfiltration of system data. Disabling the "usbmuxd" daemon blocks connections to iOS devices.

Check content

To check if the "usbmuxd" daemon is disabled, use the following command: /usr/bin/sudo /bin/launchctl print-disabled system | /usr/bin/grep com.apple.usbmuxd If the results do not show the following, this is a finding: "com.apple.usbmuxd" => true

Fix text

To disable the "usbmuxd" daemon, run the following command: /usr/bin/sudo /bin/launchctl disable system/com.apple.usbmuxd The system may need to be restarted for the update to take effect.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.