Audit Lockdown Mode

BajaNivel 2Revisión manualmacos

Descripción

Apple introduced Lockdown Mode as a security feature in their 2022 OS releases that provides additional security protection Apple describes as extreme. Users and organizations that suspect some users are targets of advanced attacks must consider using this control. When lockdown mode is enabled, specific trusted websites can be excluded from Lockdown protection if necessary.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

GUI: System Settings > Privacy & Security > Verify Lockdown Mode is set to your organization's requirements. Terminal: sudo -u <username> /usr/bin/defaults read .GlobalPreferences.plist LDMGlobalEnabled 2>/dev/null When Lockdown mode has been enabled, it will return 1 and when disabled return 0. If

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

GUI: System Settings > Privacy & Security > Set Lockdown Mode to your organization's requirements.

Propiedades

Sistemas operativos: macos-15
Etiquetas: macossystem-settings
Referencia: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.6.7 Audit Lockdown Mode