TMA-MACOS-1.6

Ensure Software Update Deferment Is Less Than or Equal to 30 Days

HochStufe 1Automatisiertmacos

Beschreibung

Apple provides the capability to manage software updates on Apple devices through mobile device management. Part of those capabilities permit organizations to defer software updates and allow for testing. Many organizations have specialized software and configurations that may be negatively impacted by Apple updates. If software updates are deferred, they should not be deferred for more than 30 days. Audit: No deferral profile (no value) passes, as the benchmark states.

So wird geprüft

Prüfmethode: Shell-Befehl

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let delay = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('enforcedSoftwareUpdateDelay'))
  if ( delay == null || delay <= 30 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Erwartete Ausgabe: true

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Profile (preferred): com.apple.applicationaccess enforcedSoftwareUpdateDelay = <integer><1-30></integer>.

Eigenschaften

Betriebssysteme: macos-26
Tags: macossoftware-update
Referenz: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.6 Ensure Software Update Deferment Is Less Than or Equal to 30 Days

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target macos