Ensure Install of macOS Updates Is Enabled

MediaNivel 1Automatizadamacos

Descripción

Ensure that macOS updates are installed after they are available from Apple. This setting enables macOS updates to be automatically installed. Some environments will want to approve and test updates before they are delivered. It is best practice to test first where updates can and have caused disruptions to operations.

Cómo se verifica

Método de auditoría: Comando de shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate').objectForKey('AutomaticallyInstallMacOSUpdates').js
EOS

Salida esperada: true

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates = <true/>. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates -bool TRUE. GUI: System Settings > General > Software Update > i > Set Install macOS updates to enabled > Done.

Propiedades

Sistemas operativos: macos-26
Etiquetas: macossoftware-update
Referencia: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.3 Ensure Install of macOS Updates Is Enabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos