TMAegisベータ
macos のその他のルール

macOS

TMA-MACOS14-2.6.1.2

Ensure 'Show Location Icon in Control Center when System Services Request Your Location' Is Enabled

低レベル 2自動macos

説明

This setting provides the user an understanding of the current status of Location Services and which applications are using it. Apple has fully integrated location services into macOS. When user applications access location, an arrow is displayed next to the Control Center in the menu bar to give users an indication when their location is being accessed. By default, system services like time zones, weather, travel times, geolocation, "Find my Mac," and advertising services do not indicate the location is accessed. Enabling the “Show location icon in the menu bar when System Services request your location” setting will show an arrow in the control center when a system service accesses the location. Although an indication that location was accessed, Control Center will only say that it was accessed by "System Services" and not the individual service. Looking in System Settings > Locatio...

チェック方法

監査方法: シェルコマンド

shell
/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.locationmenu').objectForKey('ShowSystemServices').js
EOS
期待される出力
true

修正方法

修正方法: ガイダンスまたは IaC パッチ

Graphical Method: Perform the following steps to set whether the location services icon is in the menu bar: 1. Open System Settings 2. Select Privacy & Security 3. Select Location Services 4. Select Details... 5. Set Show location icon in menu bar when System Services request your location to enabled Terminal Method: Run the following commands to set the option of the location services icon being in the menu bar: % /usr/bin/sudo /usr/bin/defaults write /Library/Preferences/com.apple.locationmenu.plist ShowSystemServices -bool true

プロパティ

オペレーティングシステム
macos-14
タグ
macossonoma
参照
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.6.1.2 Ensure 'Show Location Icon in Control Center when System Services Request Your Location' Is Enabled

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell
tmaegis scan --target macos --level 2