Audit Lockdown Mode

低レベル 2手動レビューmacos

説明

Apple introduced Lockdown Mode as a security feature in their 2022 OS releases that provides additional security protection Apple describes as extreme. Users and organizations that suspect some users are targets of advanced attacks must consider using this control. When lockdown mode is enabled, specific trusted websites can be excluded from Lockdown protection if necessary.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

GUI: System Settings > Privacy & Security > Verify Lockdown Mode is set to your organization's requirements. Terminal: sudo -u <username> /usr/bin/defaults read .GlobalPreferences.plist LDMGlobalEnabled 2>/dev/null When Lockdown mode has been enabled, it will return 1 and when disabled return 0. If

修正方法

修正方法: ガイダンスまたは IaC パッチ

GUI: System Settings > Privacy & Security > Set Lockdown Mode to your organization's requirements.

プロパティ

オペレーティングシステム: macos-15
タグ: macossystem-settings
参照: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.6.7 Audit Lockdown Mode