TMAegisBeta
Aturan lainnya untuk macos

macOS

TMA-MACOS-2.11.3

Ensure a Custom Message for the Login Screen Is Enabled

RendahLevel 1Otomatismacos

Deskripsi

An access warning informs the user that the system is reserved for authorized use only, and that the use of the system may be monitored. Audit: Verify the text itself matches the organisation-approved message.

Cara pemeriksaan

Metode audit: Perintah shell

shell
/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let msg = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow').objectForKey('LoginwindowText'))
  if ( msg != null && String(msg).trim().length > 0 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS
Output yang diharapkan
true

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Profile (preferred): com.apple.loginwindow LoginwindowText = <string><Your organization's required. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "<custom message>" ; sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Center for Internet Security Test Message". GUI: System Settings > Lock Screen > Set Show message when locked to enabled > Set > Insert text in the Set a message to appear on the lock screen that matches your organization's required text > Done.

Properti

Sistem operasi
macos-26
Tag
macossystem-settings
Referensi
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.11.3 Ensure a Custom Message for the Login Screen Is Enabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell
tmaegis scan --target macos