The macOS system must disable content caching service.

STIG ID: APPL-14-002140 |  SRG: SRG-OS-000095-GPOS-00049 |  Severity: medium |  CCI:  | Vulnerability Id: V-259522

Vulnerability Discussion

Content caching must be disabled.

Content caching is a macOS service that helps reduce internet data usage and speed up software installation on Mac computers. It is not recommended for devices furnished to employees to act as a caching server.

Check

Configure the macOS system to disable content caching service by installing the "com.apple.applicationaccess" configuration profile.

Fix

Verify the macOS system is configured to disable content caching service with the following command:

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\
.objectForKey('allowContentCaching').js
EOS

If the result is not "false", this is a finding.