macOS
TMA-MACOS14-6.3.10
Ensure Show Status Bar Is Enabled
LowLevel 1Automatedmacos
Description
The Status Bar in Safari shows the full URL of any link on hover. It protects the user from visiting sites where the domain has been obfuscated by allowing the user to review whether the link points to an unexpected location. Showing the Status Bar allows the user to review the full URL of hyperlinks.
How it is checked
Audit method: Shell command
shell
out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -E 'ShowOverlayStatusBar' | /usr/bin/tr -d ' '- Expected output
ShowOverlayStatusBar=1;
How it is fixed
Fix method: Guidance or infrastructure patch
Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.Safari 2. The key to include is ShowOverlayStatusBar 3. The key must be set to: <true/>
Properties
- Operating systems
- macos-14
- Tags
- macossonoma
- Reference
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.10 Ensure Show Status Bar Is Enabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target macos