macOS
TMA-MACOS14-6.4.1
Ensure Secure Keyboard Entry Terminal.app Is Enabled
Deskripsi
Secure Keyboard Entry prevents other applications on the system and/or network from detecting and recording what is typed into Terminal. Unauthorized applications and malicious code could intercept keystrokes entered in the Terminal. Enabling Secure Keyboard Entry minimizes the risk of a key logger detecting what is entered in Terminal.
Cara pemeriksaan
Metode audit: Perintah shell
/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.Terminal').objectForKey('SecureKeyboardEntry').js
EOS- Output yang diharapkan
true
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Date Version Changes for this version Oct 31, 2025 3.0.0 2.9.1 – Updated Impact Statement Oct 31, 2025 3.0.0 6.1.1 – Updated Title and switched to a Manual recommendation Oct 31, 2025 3.0.0 6.3 - Updated Description Oct 31, 2025 3.0.0 7.4 – Added to Supplemental from removed recommendation 1.7 Oct 31, 2025 3.0.0 Updated Benchmark Release May 15, 2026 3.1.0 Draft Update Released Jun 1, 2026 3.1.0 2.3.5 - Device Management Sub-Section Added Jun 1, 2026 3.1.0 2.7.1 – Updated Title, Audit, and Remediation to focus on the current user Jun 1, 2026 3.1.0 2.10.1.2 – Updated Audit for better device check Jun 1, 2026 3.1.0 3.4 – Updated Title, Description, Impact Statement, Audit, and Remediation to retain logs for 30 days with no maximum Jun 1, 2026 3.1.0 3.5 – Updated Remediation to access of 700 from 440 Jun 1, 2026 3.1.0 5.1.6 – Updated Audit to output any error codes to null Jun 1, 2026 3.1.0 5.1.7 – Updated Audit to ignore non-accessible folder Date Version Changes for this version Jun 1, 2026 3.1.0 5.3 – Description updated to refer to new recommendations Jun 1, 2026 3.1.0 5.3.1 and 5.3.2 – Original Recommendations removed and replace Jun 1, 2026 3.1.0 5.3.1 – Added Recommendation...
Properti
- Sistem operasi
- macos-14
- Tag
- cryptomacossonoma
- Referensi
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.4.1 Ensure Secure Keyboard Entry Terminal.app Is Enabled
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
tmaegis scan --target macos