Ensure Media Sharing Is Disabled

BajaNivel 2Automatizadamacos

Descripción

Starting with macOS 10.15, Apple has provided a control which permits a user to share Apple downloaded content on all Apple devices that are signed in with the same Apple Account. This allows users to share downloaded Movies, Music, or TV shows with other controlled macOS, iOS and iPadOS devices, as well as photos with Apple TVs. With this capability, guest users can also use media downloaded on the computer.

Cómo se verifica

Método de auditoría: Comando de shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharing'))
  let pref2 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharingModification'))
  if ( pref1 == 0 && pref2 == 0 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Salida esperada: true

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Profile (preferred): com.apple.applicationaccess allowMediaSharing = <false/>; com.apple.applicationaccess allowMediaSharingModification = <false/>.

Propiedades

Sistemas operativos: macos-15
Etiquetas: macossystem-settings
Referencia: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.3.9 Ensure Media Sharing Is Disabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos --level 2