Audit Software Inventory

FaibleNiveau 2Revue manuellemacos

Description

With the introduction of Mac OS X 10.6.6, Apple added a new application, App Store, which resides in the Applications directory. This application allows a user with admin privileges and an Apple ID to browse Apple's online App Store, purchase (including no- cost purchases), and install new applications, bypassing Enterprise software inventory controls. Any admin user can install software in the /Applications directory whether from internet downloads, thumb drives, optical media, cloud storage, or even binaries through email. Even standard users can run executables downloaded to their home folder by default. The source of the software is not nearly as important as a consistent audit of all installed software for patch compliance and appropriateness. A single user desktop where the user, administrator, and the person approving software are all the same person probably does not need to a...

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Graphical Mode: Perform the following steps to access System Information: 1. Open /Applications/Utilities/System Information 2. Select Software 3. Select System Report 4. Select Applications 5. Verify that no Applications listed are against your organization's requirements 6. Select Installations 7. Verify that no Installations listed are against your organization's requirements Terminal Method: Run the following command to view all System Profiler details % /usr/bin/sudo /usr/sbin/system_profiler SPApplicationsDataType

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Delete any unnecessary applications from the system.

Propriétés

Systèmes d'exploitation: macos-14
Étiquettes: loggingmacossonoma
Référence: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 3.7 Audit Software Inventory