macOS
TMA-MACOS14-6.3.8
Audit AutoFill
Descripción
AutoFill capabilities in a Web Browser are a feature to allow a user to avoid re-typing the same user information in every form that a user encounters. Part of the modern internet consists of vendors establishing a seemingly close relationship with as many users as possible to market to them, data-mine from them and sell their data to third- party data aggregators. AutoFill can be a method for a user to share too much information with untrusted website owners. Many security professionals advise disabling AutoFill to reduce the risk of over-sharing. These security professionals appear to believe that manual data entry is better, since completing the required forms are often the only method to connect to needed data. The best method for security is to ensure that the data ready to be auto-filled is an acceptable risk to sites a user interacts with. Users must review what data they accep...
Cómo se verifica
Método de auditoría: Revisión manual
Graphical Method: Perform the following steps to verify AutoFill in Safari: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has safariAllowAutoFill set to your organization's requirements Terminal Method: Run the following command to verify that a profile is installed that sets autofill in Safari to your organization's requirements: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('safariAllowAutoFill').js EOS false
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is safariAllowAutoFill 3. The key must be set to <<true>or<false>/>
Propiedades
- Sistemas operativos
- macos-14
- Etiquetas
- loggingmacossonoma
- Referencia
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.8 Audit AutoFill