TMA-MACOS-2.6.5

Ensure Gatekeeper Is Enabled

높음레벨 1자동macos

설명

Gatekeeper is Apple’s application that utilizes allowlisting to restrict downloaded applications from launching. It functions as a control to limit applications from unverified sources from running without authorization. In an update to Gatekeeper in macOS 13 Ventura, Gatekeeper checks every application on every launch, not just quarantined apps.

점검 방법

감사 방식: 셸 명령

shell

/usr/sbin/spctl --status 2>&1

예상 출력: assessments enabled

조치 방법

조치 방식: 가이드 또는 인프라 패치

Profile (preferred): com.apple.systempolicy.control AllowIdentifiedDevelopers = <true/>; com.apple.systempolicy.control EnableAssessment = <true/>. GUI: System Settings > Privacy & Security > Set 'Allow apps downloaded from' to 'App Store and identified developers'.

속성

운영 체제: macos-26
태그: macossystem-settings
참고 자료: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.5 Ensure Gatekeeper Is Enabled

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target macos