TMAegisBeta
More rules for macos

macOS

TMA-MACOS-2.6.1.1

Ensure Location Services Is Enabled

LowLevel 2Automatedmacos

Description

macOS uses location information gathered through local Wi-Fi networks to enable applications to supply relevant information to users. With the operating system verifying the location, users do not need to change the time or the time zone. The computer will change them based on the user's location.

How it is checked

Audit method: Shell command

shell
n=$(/bin/launchctl list 2>/dev/null | /usr/bin/grep -c com.apple.locationd)
e=$(/usr/bin/sudo -u _locationd /usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.locationd').objectForKey('LocationServicesEnabled').js
EOS
) || exit 1
if [ "${n:-0}" -ge 1 ] && [ "$e" = true ]; then echo compliant; else echo "locationd=$n LocationServicesEnabled=${e:-unset}"; fi
Expected output
compliant

How it is fixed

Fix method: Guidance or infrastructure patch

Terminal: sudo /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.locationd.plist ; sudo /usr/bin/defaults write /var/db/locationd/Library/Preferences/ByHost/com.apple.locationd LocationServicesEnabled -bool true ; sudo /usr/bin/killall locationd. GUI: System Settings > Privacy & Security > Location Services > Set Location Services to enabled.

Properties

Operating systems
macos-26
Tags
macossystem-settings
Reference
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.1.1 Ensure Location Services Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target macos --level 2