Ensure Screen Saver Hot Corners Are Secure For Current User

Méthode de vérification

Méthode d'audit: Commande shell

[ -x /usr/bin/defaults ] || exit 1
u=$(/usr/bin/stat -f%Su /dev/console 2>/dev/null)
[ -n "$u" ] && [ "$u" != root ] || u=$(/usr/bin/defaults read /Library/Preferences/com.apple.loginwindow lastUserName 2>/dev/null) || exit 1
bad=""
for c in bl tl tr br; do
  v=$(/usr/bin/defaults read "/Users/$u/Library/Preferences/com.apple.dock" "wvous-$c-corner" 2>/dev/null)
  [ "$v" = 6 ] && bad="$bad $c"
done
if [ -z "$bad" ]; then echo compliant; else echo "hot corner set to disable screen saver:$bad"; fi

Sortie attendue

compliant

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Terminal: sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-bl-corner 2>/dev/null ; sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tl-corner 2>/dev/null ; sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tr-corner 2>/dev/null. GUI: System Settings > Desktop & Dock > Hot Corners > Set and hot corner that is set to Disable Screen Saver to a setting that matches your organizational requirements.

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

tmaegis scan --target macos