Ensure Limit Ad Tracking Is Enabled

LowLevel 1Automatedmacos

Description

Apple provides a framework that allows advertisers to target Apple users and end-users with advertisements. While many people prefer to see advertising that is relevant to them and their interests, the detailed information that is collected, correlated, and available to advertisers in repositories via data mining is often disconcerting.

How it is checked

Audit method: Shell command

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowApplePersonalizedAdvertising').js
EOS

Expected output: false

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.applicationaccess allowApplePersonalizedAdvertising = <false/>.

Properties

Operating systems: macos-15
Tags: macossystem-settings
Reference: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.6.4 Ensure Limit Ad Tracking Is Enabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos