Ensure Power Nap Is Disabled for Intel Macs

낮음레벨 1자동macos

설명

Power Nap allows the system to stay in low power mode, especially while on battery power, and periodically connect to previously known networks with stored credentials for user applications to phone home and get updates. This capability requires FileVault to remain unlocked and the use of previously joined networks to be risk accepted based on the SSID without user input. Audit: Intel Macs only; Apple silicon reports 0 (not applicable).

점검 방법

감사 방식: 셸 명령

shell

[ -x /usr/bin/pmset ] || exit 1
/usr/sbin/sysctl -n machdep.cpu.brand_string | /usr/bin/grep -q Intel || { echo 0; exit 0; }
/usr/bin/pmset -g custom | /usr/bin/awk '$1 == "powernap" && $2 == 1 {n++} END {print n+0}'

예상 출력: 0

조치 방법

조치 방식: 가이드 또는 인프라 패치

Terminal: sudo /usr/bin/pmset -a powernap 0. GUI: Desktop Instructions: System Settings > Energy Saver > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled. Laptop Instructions: System Settings > Battery > Power Adapter (for laptops only) > Set Power Nap to disabled > Battery > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled.

속성

운영 체제: macos-26
태그: macossystem-settings
참고 자료: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.10.2 Ensure Power Nap Is Disabled for Intel Macs

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target macos