Audit Location Services Access

FaibleNiveau 2Revue manuellemacos

Description

macOS uses location information gathered through local Wi-Fi networks to enable applications to supply relevant information to users. While Location Services may be very useful, it may not be desirable to allow all applications that can use Location Services to use your location for Internet queries in order to provide tailored content based on your current location. Ensure applications that can use Location Services are authorized and provide that information where the application interacts with external systems. Apple offers feedback within System Preferences and may be enabled to supply information on the menu bar when Location Services are used. Safari can deny access from websites or prompt for access. Applications that support Location Services can be individually controlled in the Privacy tab in Security & Privacy under System Preferences. Access should be evaluated to ensure t...

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Graphical Method: Perform the following steps to verify what applications are enabled for Location Services: 1. Open System Settings 2. Select Privacy & Security 3. Select Location Services 4. Verify that the applications allowed to access Location Services are set to your organization's requirements Perform the following steps to verify what websites are enabled to ask for access to Location Services: 1. Open Safari 2. Select Safari from the menu bar 3. Select Settings 4. Select Websites 5. Select Location 6. Verify that When visiting other websites is set to your organization's requirements Terminal Method: Run the following command to evaluate the applications that are enabled to use Location Services: % /usr/bin/sudo /usr/bin/defaults read /var/db/locationd/clients.plist Ensure that all applications listed have been authorized to access location information.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Graphical Method: Perform the following steps to disable unnecessary applications from accessing Location Services: 1. Open System Settings 2. Select Privacy & Security 3. Select Location Services 4. Set any applications listed to your organization's requirements Perform the following steps to set websites to ask for permission to access Location Services: 1. Open Safari 2. Select Safari from the menu bar 3. Select Settings 4. Select Websites 5. Select Location 6. Set When visiting other websites to your organization's requirements

Propriétés

Systèmes d'exploitation: macos-14
Étiquettes: access-controlloggingmacossonoma
Référence: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.6.1.3 Audit Location Services Access