Ensure Media Sharing Is Disabled

RendahLevel 2Otomatismacos

Deskripsi

Starting with macOS 10.15, Apple has provided a control which permits a user to share Apple downloaded content on all Apple devices that are signed in with the same Apple Account. This allows users to share downloaded Movies, Music, or TV shows with other controlled macOS, iOS and iPadOS devices, as well as photos with Apple TVs. With this capability, guest users can also use media downloaded on the computer.

Cara pemeriksaan

Metode audit: Perintah shell

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharing'))
  let pref2 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharingModification'))
  if ( pref1 == 0 && pref2 == 0 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Output yang diharapkan: true

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Profile (preferred): com.apple.applicationaccess allowMediaSharing = <false/>; com.apple.applicationaccess allowMediaSharingModification = <false/>.

Properti

Sistem operasi: macos-15
Tag: macossystem-settings
Referensi: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.3.9 Ensure Media Sharing Is Disabled

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target macos --level 2