macOS
TMA-MACOS14-3.7
Audit Software Inventory
Descripción
With the introduction of Mac OS X 10.6.6, Apple added a new application, App Store, which resides in the Applications directory. This application allows a user with admin privileges and an Apple ID to browse Apple's online App Store, purchase (including no- cost purchases), and install new applications, bypassing Enterprise software inventory controls. Any admin user can install software in the /Applications directory whether from internet downloads, thumb drives, optical media, cloud storage, or even binaries through email. Even standard users can run executables downloaded to their home folder by default. The source of the software is not nearly as important as a consistent audit of all installed software for patch compliance and appropriateness. A single user desktop where the user, administrator, and the person approving software are all the same person probably does not need to a...
Cómo se verifica
Método de auditoría: Revisión manual
Graphical Mode: Perform the following steps to access System Information: 1. Open /Applications/Utilities/System Information 2. Select Software 3. Select System Report 4. Select Applications 5. Verify that no Applications listed are against your organization's requirements 6. Select Installations 7. Verify that no Installations listed are against your organization's requirements Terminal Method: Run the following command to view all System Profiler details % /usr/bin/sudo /usr/sbin/system_profiler SPApplicationsDataType
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Delete any unnecessary applications from the system.
Propiedades
- Sistemas operativos
- macos-14
- Etiquetas
- loggingmacossonoma
- Referencia
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 3.7 Audit Software Inventory