Ensure On-Device Dictation Is Enabled

BajaNivel 1Automatizadamacos

Descripción

In macOS 14.0 Sonoma, Apple released the ability to limit dictation to staying on-device and not sending data to the Siri servers. The use of dictation is likely to include editing documents with confidential information. While Apple does have controls to obfuscate voice data that exists on their servers, it is recommended that Dictation-collected information does not leave the local Mac.

Cómo se verifica

Método de auditoría: Comando de shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('forceOnDeviceOnlyDictation').js
EOS

Salida esperada: true

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.applicationaccess forceOnDeviceOnlyDictation = <true/>.

Propiedades

Sistemas operativos: macos-15
Etiquetas: macossystem-settings
Referencia: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.18.1 Ensure On-Device Dictation Is Enabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos