Ensure Prevent Cross-site Tracking in Safari Is Enabled

BajaNivel 1Automatizadamacos

Descripción

There is a vast network of groups that collect, use, and sell user data. One method used to collect user data is pay and provide content and services for website owners. Along with that "assistance," the site owners also push tracking cookies on visitors. In many cases the help allows a content owner to keep the site up. The tracking cookies allow information brokers to track web users across visited sites. Audit: All three keys must be present: BlockStoragePolicy=2, WebKitPreferences.storageBlockingPolicy=1, WebKitStorageBlockingPolicy=1.

Cómo se verifica

Método de auditoría: Comando de shell

shell

out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null | /usr/bin/tr -d ' ') || exit 1
if printf '%s\n' "$out" | /usr/bin/grep -qx 'BlockStoragePolicy=2;' && printf '%s\n' "$out" | /usr/bin/grep -qxF 'WebKitPreferences.storageBlockingPolicy=1;' && printf '%s\n' "$out" | /usr/bin/grep -qx 'WebKitStorageBlockingPolicy=1;'; then echo compliant; else echo noncompliant; fi

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.Safari BlockStoragePolicy = <integer>2</integer>; com.apple.Safari WebKitPreferences.storageBlockingPolicy = <integer>1</integer>; com.apple.Safari WebKitStorageBlockingPolicy = <integer>1</integer>.

Propiedades

Sistemas operativos: macos-26
Etiquetas: macosapplications
Referencia: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 6.3.4 Ensure Prevent Cross-site Tracking in Safari Is Enabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos