TMAegisBeta
More rules for macos

macOS

TMA-MACOS14-6.3.10

Ensure Show Status Bar Is Enabled

LowLevel 1Automatedmacos

Description

The Status Bar in Safari shows the full URL of any link on hover. It protects the user from visiting sites where the domain has been obfuscated by allowing the user to review whether the link points to an unexpected location. Showing the Status Bar allows the user to review the full URL of hyperlinks.

How it is checked

Audit method: Shell command

shell
out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -E 'ShowOverlayStatusBar' | /usr/bin/tr -d ' '
Expected output
ShowOverlayStatusBar=1;

How it is fixed

Fix method: Guidance or infrastructure patch

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.Safari 2. The key to include is ShowOverlayStatusBar 3. The key must be set to: <true/>

Properties

Operating systems
macos-14
Tags
macossonoma
Reference
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.10 Ensure Show Status Bar Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target macos