Audit Lockdown Mode

FaibleNiveau 2Revue manuellemacos

Description

Apple introduced Lockdown Mode as a security feature in their 2022 OS releases that provides additional security protection Apple describes as extreme. Users and organizations that suspect some users are targets of advanced attacks must consider using this control. When lockdown mode is enabled, specific trusted websites can be excluded from Lockdown protection if necessary.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

GUI: System Settings > Privacy & Security > Verify Lockdown Mode is set to your organization's requirements. Terminal: sudo -u <username> /usr/bin/defaults read .GlobalPreferences.plist LDMGlobalEnabled 2>/dev/null When Lockdown mode has been enabled, it will return 1 and when disabled return 0. If

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

GUI: System Settings > Privacy & Security > Set Lockdown Mode to your organization's requirements.

Propriétés

Systèmes d'exploitation: macos-26
Étiquettes: macossystem-settings
Référence: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.7 Audit Lockdown Mode