TMAegisBeta
Weitere Regeln für macos

macOS

TMA-MACOS-2.7.1

Ensure Screen Saver Hot Corners Are Secure For Current User

NiedrigStufe 1Automatisiertmacos

Beschreibung

Hot Corners can be configured to disable the screen saver by moving the mouse cursor to a corner of the screen. This can only be accomplished by the current user, so that is the only user that needs to be audited. Audit: Checks the console user (or loginwindow lastUserName); no corner may be set to 6 (Disable Screen Saver).

So wird geprüft

Prüfmethode: Shell-Befehl

shell
[ -x /usr/bin/defaults ] || exit 1
u=$(/usr/bin/stat -f%Su /dev/console 2>/dev/null)
[ -n "$u" ] && [ "$u" != root ] || u=$(/usr/bin/defaults read /Library/Preferences/com.apple.loginwindow lastUserName 2>/dev/null) || exit 1
bad=""
for c in bl tl tr br; do
  v=$(/usr/bin/defaults read "/Users/$u/Library/Preferences/com.apple.dock" "wvous-$c-corner" 2>/dev/null)
  [ "$v" = 6 ] && bad="$bad $c"
done
if [ -z "$bad" ]; then echo compliant; else echo "hot corner set to disable screen saver:$bad"; fi
Erwartete Ausgabe
compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Terminal: sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-bl-corner 2>/dev/null ; sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tl-corner 2>/dev/null ; sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tr-corner 2>/dev/null. GUI: System Settings > Desktop & Dock > Hot Corners > Set and hot corner that is set to Disable Screen Saver to a setting that matches your organizational requirements.

Eigenschaften

Betriebssysteme
macos-26
Tags
macossystem-settings
Referenz
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.7.1 Ensure Screen Saver Hot Corners Are Secure For Current User

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell
tmaegis scan --target macos