V-282822

Discussion

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DOD sensitive information. SFR ID: FMT_SMF.1.1 #47

Check Content

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

This check procedure is performed on both the device management tool and the Vision Pro.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the visionOS management tool, verify "Require managed pasteboard" is set to "True".

On the Vision Pro device:
1. Open the Settings app.
2. Tap "General".
3. Tap "VPN & Device Management".
4. Tap the Configuration Profile from the visionOS management tool containing the restrictions policy.
5. Tap "Restrictions".
6. Verify "Copy and paste are managed" is listed.

If "Require managed pasteboard" is not disabled in the management tool, and "Copy and paste are managed" is not listed in Profile Restrictions on the Apple device, this is a finding.