Ensure Content Caching Is Disabled

BajaNivel 2Automatizadamacos

Descripción

Starting with macOS 10.13, Apple introduced a service to make it easier to deploy data from Apple, including software updates, where there are bandwidth constraints to the Internet and fewer constraints or greater bandwidth exist on the local subnet. This capability can be very valuable for organizations that have throttled and possibly metered Internet connections.

Cómo se verifica

Método de auditoría: Comando de shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.AssetCache').objectForKey('Activated'))
  let pref2 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowContentCaching'))
  if ( ( pref1 == 0 ) || ( pref2 == 0 ) ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Salida esperada: true

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.applicationaccess allowContentCaching = <false/>. Terminal: sudo /usr/bin/AssetCacheManagerUtil deactivate. GUI: System Settings > General > Sharing > Set Content Caching to disabled.

Propiedades

Sistemas operativos: macos-26
Etiquetas: macossystem-settings
Referencia: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.8 Ensure Content Caching Is Disabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos --level 2