macOS
TMA-MACOS-2.1.1.2
Audit iCloud Drive
説明
iCloud Drive is Apple's storage solution for applications on both macOS and iOS to use the same files that are resident in Apple's cloud storage. The iCloud Drive folder is available much like Dropbox, Microsoft OneDrive, or Google Drive. One of the concerns in public cloud storage is that proprietary data may be inappropriately stored in an end user's personal repository.
チェック方法
監査方法: 手動レビュー
GUI: System Settings > General > Device Management > Verify that an installed profile has Disallow iCloud Drive set to your organization's requirements. Terminal: sudo /usr/bin/osascript -l JavaScript (JXA) reading NSUserDefaults suite com.apple.applicationaccess, key allowCloudDocumentSync If the output is false, iCloud Drive Sync is disabled. If the output is true, iCloud Drive sync is enabled.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Profile (preferred): com.apple.applicationaccess allowCloudDocumentSync.
プロパティ
- オペレーティングシステム
- macos-26
- タグ
- macossystem-settings
- 参照
- CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.1.1.2 Audit iCloud Drive