The macOS system must disable the camera.

STIG ID: APPL-14-002017 |  SRG: SRG-OS-000095-GPOS-00049 |  Severity: medium |  CCI:  | Vulnerability Id: V-259492

Vulnerability Discussion

macOS must be configured to disable the camera.

Check

Configure the macOS system to disable the camera by installing the
"com.apple.applicationaccess" configuration profile.

Fix

Verify the macOS system is configured to disable the camera with the following command:

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\
.objectForKey('allowCamera').js
EOS

If the result is not "false", this is a finding.