Audit AutoFill

低レベル 2手動レビューmacos

説明

AutoFill capabilities in a Web Browser are a feature to allow a user to avoid re-typing the same user information in every form that a user encounters. Part of the modern internet consists of vendors establishing a seemingly close relationship with as many users as possible to market to them, data-mine from them and sell their data to third- party data aggregators. AutoFill can be a method for a user to share too much information with untrusted website owners. Many security professionals advise disabling AutoFill to reduce the risk of over-sharing. These security professionals appear to believe that manual data entry is better, since completing the required forms are often the only method to connect to needed data. The best method for security is to ensure that the data ready to be auto-filled is an acceptable risk to sites a user interacts with. Users must review what data they accep...

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Graphical Method: Perform the following steps to verify AutoFill in Safari: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has safariAllowAutoFill set to your organization's requirements Terminal Method: Run the following command to verify that a profile is installed that sets autofill in Safari to your organization's requirements: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('safariAllowAutoFill').js EOS false

修正方法

修正方法: ガイダンスまたは IaC パッチ

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is safariAllowAutoFill 3. The key must be set to <<true>or<false>/>

プロパティ

オペレーティングシステム: macos-14
タグ: loggingmacossonoma
参照: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.8 Audit AutoFill