Ensure Power Nap Is Disabled for Intel Macs

RendahLevel 1Otomatismacos

Deskripsi

Power Nap allows the system to stay in low power mode, especially while on battery power, and periodically connect to previously known networks with stored credentials for user applications to phone home and get updates. This capability requires FileVault to remain unlocked and the use of previously joined networks to be risk accepted based on the SSID without user input. Audit: Intel Macs only; Apple silicon reports 0 (not applicable).

Cara pemeriksaan

Metode audit: Perintah shell

shell

[ -x /usr/bin/pmset ] || exit 1
/usr/sbin/sysctl -n machdep.cpu.brand_string | /usr/bin/grep -q Intel || { echo 0; exit 0; }
/usr/bin/pmset -g custom | /usr/bin/awk '$1 == "powernap" && $2 == 1 {n++} END {print n+0}'

Output yang diharapkan: 0

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Terminal: sudo /usr/bin/pmset -a powernap 0. GUI: Desktop Instructions: System Settings > Energy Saver > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled. Laptop Instructions: System Settings > Battery > Power Adapter (for laptops only) > Set Power Nap to disabled > Battery > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled.

Properti

Sistem operasi: macos-15
Tag: macossystem-settings
Referensi: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.10.2 Ensure Power Nap Is Disabled for Intel Macs

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target macos