Ensure Gatekeeper Is Enabled

TinggiLevel 1Otomatismacos

Deskripsi

Gatekeeper is Apple’s application that utilizes allowlisting to restrict downloaded applications from launching. It functions as a control to limit applications from unverified sources from running without authorization. In an update to Gatekeeper in macOS 13 Ventura, Gatekeeper checks every application on every launch, not just quarantined apps.

Cara pemeriksaan

Metode audit: Perintah shell

shell

/usr/sbin/spctl --status 2>&1

Output yang diharapkan: assessments enabled

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Profile (preferred): com.apple.systempolicy.control AllowIdentifiedDevelopers = <true/>; com.apple.systempolicy.control EnableAssessment = <true/>. GUI: System Settings > Privacy & Security > Set 'Allow apps downloaded from' to 'App Store and identified developers'.

Properti

Sistem operasi: macos-26
Tag: macossystem-settings
Referensi: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.5 Ensure Gatekeeper Is Enabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target macos