Ensure an Inactivity Interval of 15 Minutes Or Less for the Screen Saver Is Enabled

MediaNivel 1Automatizadamacos

Descripción

A locking screen saver is one of the standard security controls to limit access to a computer and the current user's session when the computer is temporarily unused or unattended. In macOS, the screen saver starts after a value is selected in the drop- down menu. 15 minutes or less is an acceptable value. Audit: Unlike the benchmark script, an unset idleTime fails (JavaScript treats null <= 900 as true).

Cómo se verifica

Método de auditoría: Comando de shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let timeout = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.screensaver').objectForKey('idleTime'))
  if ( timeout != null && timeout > 0 && timeout <= 900 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Salida esperada: true

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.screensaver idleTime = <integer><≤900></integer>.

Propiedades

Sistemas operativos: macos-26
Etiquetas: macossystem-settings
Referencia: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.11.1 Ensure an Inactivity Interval of 15 Minutes Or Less for the Screen Saver Is Enabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos