TMA-MACOS-1.1

Ensure Apple-provided Software Updates Are Installed

ÉlevéeNiveau 1Automatiséemacos

Description

Software vendors release security patches and software updates for their products when security vulnerabilities are discovered. There is no simple way to complete this action without a network connection to an Apple software repository. Please ensure appropriate access for this control. This check is only for what Apple provides through software update. Audit: Passes when LastFullSuccessfulDate is within 30 days and RecommendedUpdates lists no pending update.

Méthode de vérification

Méthode d'audit: Commande shell

shell

[ -x /usr/bin/defaults ] || exit 1
d=$(/usr/bin/defaults read /Library/Preferences/com.apple.SoftwareUpdate LastFullSuccessfulDate 2>/dev/null) || { echo "never checked"; exit 0; }
t=$(/bin/date -j -f "%Y-%m-%d %H:%M:%S %z" "$d" +%s 2>/dev/null) || exit 1
now=$(/bin/date +%s)
[ $((now - t)) -le 2592000 ] || { echo "last successful check older than 30 days: $d"; exit 0; }
n=$(/usr/bin/defaults read /Library/Preferences/com.apple.SoftwareUpdate RecommendedUpdates 2>/dev/null | /usr/bin/grep -c "Product Key")
if [ "${n:-0}" -eq 0 ]; then echo compliant; else echo "updates pending: $n"; fi

Sortie attendue: compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Terminal: sudo /usr/sbin/softwareupdate -l ; sudo /usr/sbin/softwareupdate -i -a ; sudo /usr/sbin/softwareupdate -i '<package name>'. GUI: System Settings > General > Software Update > Update All.

Propriétés

Systèmes d'exploitation: macos-26
Étiquettes: macossoftware-update
Référence: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.1 Ensure Apple-provided Software Updates Are Installed

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target macos