TMA-MACOS-1.6

Ensure Software Update Deferment Is Less Than or Equal to 30 Days

ÉlevéeNiveau 1Automatiséemacos

Description

Apple provides the capability to manage software updates on Apple devices through mobile device management. Part of those capabilities permit organizations to defer software updates and allow for testing. Many organizations have specialized software and configurations that may be negatively impacted by Apple updates. If software updates are deferred, they should not be deferred for more than 30 days. Audit: No deferral profile (no value) passes, as the benchmark states.

Méthode de vérification

Méthode d'audit: Commande shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let delay = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('enforcedSoftwareUpdateDelay'))
  if ( delay == null || delay <= 30 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Sortie attendue: true

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Profile (preferred): com.apple.applicationaccess enforcedSoftwareUpdateDelay = <integer><1-30></integer>.

Propriétés

Systèmes d'exploitation: macos-26
Étiquettes: macossoftware-update
Référence: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.6 Ensure Software Update Deferment Is Less Than or Equal to 30 Days

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target macos