TMAegisBeta
More rules for macos

macOS

TMA-MACOS15-6.3.5

Audit Hide IP Address in Safari Setting

LowLevel 2Manual reviewmacos

Description

Public (Routable) IP addresses can be used to track people to their current location, including home and business addresses. While a valid IP address is necessary to load the site, the valid address does not need to be provided to known trackers and should be hidden.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: Safari > Safari from the menu bar > Settings > Privacy > Verify that Hide IP address from trackers is set to your organization's requirement. Terminal: sudo -u <username> /usr/bin/defaults read /Users/<username>/Library/Containers/com.apple.Safari/Data/Library/Preference s/com.apple.Safari WBSPrivacyProxyAvailabilityTraffic ; sudo -u firstuser /usr/bin/defaults read /Users/firstuser/Library/Containers/com.apple.Safari/Data/Library/Preferences /com.apple.Safari WBSPrivacyProxyAvailabilityTraffic The output will be either 33422560 if hide IP address from trackers is ... (see benchmark)

How it is fixed

Fix method: Guidance or infrastructure patch

Terminal: sudo -u <username> /usr/bin/defaults write /Users/<username>/Library/Containers/com.apple.Safari/Data/Library/Preference s/com.apple.Safari WBSPrivacyProxyAvailabilityTraffic -int <130272/130276> 33422560 will set hide IP address from trackers to disabled. 33422564 will enable from Trackers Only, and 33422572 will enabled from Trackers and Websites. ; sudo -u firstuser /usr/bin/defaults write /Users/firstuser/Library/Containers/com.apple.Safari/Data/Library/Preferences /com.apple.Safari WBSPrivacyProxyAvailabilityTraffic -int 33422560 ; sudo -u seconduser /usr/bin/defaults write /Users/seconduser/Library/Containers/com.apple.Safari/Data/Library/Preference s/com.apple.Safari WBSPrivacyProxyAvailabilityTraffic -int 33422564. GUI: Safari > Safari from the menu bar > Settings > Privacy > Set Hide IP address from trackers to your organization's requirements.

Properties

Operating systems
macos-15
Tags
macosapplications
Reference
CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 6.3.5 Audit Hide IP Address in Safari Setting