Details

Apple provides a mechanism to send diagnostic and analytics data back to Apple to help them improve the platform. Information sent to Apple may contain internal organizational information that should be controlled and not available for processing by Apple. Turn off all Analytics and Improvements sharing.

Share Mac Analytics (Share with App Developers dependent on Mac Analytic sharing)

Includes diagnostics, usage and location data

Share iCloud Analytics

Includes iCloud data and usage information

Share analytics information from your Mac with Apple

Rationale:

Organizations should have knowledge of what is shared with the vendor and the setting automatically forwards information to Apple.

Solution

Perform the following to disable diagnostic data being sent to Apple:
Graphical Method:

Open System Preferences

Select Security & Privacy

Select Privacy

Select Analytics & Improvements

Uncheck ‘Share Mac Analytics’

Uncheck ‘Share with App Developers’

Terminal Method:

$ sudo /usr/bin/defaults write /Library/Application Support/CrashReporter/DiagnosticMessagesHistory.plist AutoSubmit -bool false

$ sudo /bin/chmod 644 /Library/Application Support/CrashReporter/DiagnosticMessagesHistory.plist

$ sudo /usr/sbin/chgrp admin /Library/Application Support/CrashReporter/DiagnosticMessagesHistory.plist

Profile Method:

Create or edit a configuration profile with the PayLoadType of com.apple.applicationaccess

Add the key allowDiagnosticSubmission

Set the key to

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3644

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management, Identification and Authentication.This control applies to the following type of system Unix.

References

• 800-53|CM-1
• 800-53|CM-2
• 800-53|CM-6
• 800-53|CM-7
• 800-53|IA-5
• CSCv7|5.1
• CSCv7|9.2

Source

• Tenable.com/audits