Ensure Automatic Opening of Safe Files in Safari Is Disabled

보통레벨 1자동macos

설명

Safari will automatically run or execute what it considers safe files. This can include installers and other files that execute on the operating system. Safari evaluates file safety by using a list of filetypes maintained by Apple. The list of files include text, image, video and archive formats that would be run in the context of the OS rather than the browser.

점검 방법

감사 방식: 셸 명령

shell

out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -E 'AutoOpenSafeDownloads' | /usr/bin/tr -d ' '

예상 출력: AutoOpenSafeDownloads=0;

조치 방법

조치 방식: 가이드 또는 인프라 패치

Profile (preferred): com.apple.Safari AutoOpenSafeDownloads = <false/>.

속성

운영 체제: macos-26
태그: macosapplications
참고 자료: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 6.3.1 Ensure Automatic Opening of Safe Files in Safari Is Disabled

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target macos