Audit App Store Password Settings

낮음레벨 2수동 검토macos

설명

With Mac OS X 10.11, Apple added settings for password storage for the App Store in macOS. These settings parallel the settings in iOS. As with iOS, the choices are a requirement to provide a password after every purchase or to have a 15-minute grace period, and whether or not to require a password for free purchases. The response to this setting is stored in a cookie and processed by iCloud. There is plenty of risk information on the wisdom of this setting for parents with children buying games on iPhones and iPads. The most relevant information here is the likelihood that users who are not authorized to download software may have physical access to an unlocked computer where someone who is authorized recently made a purchase. If that is a concern, a password should be required at all times for App Store access in the Password Settings controls.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Graphical Method: Perform the following steps to verify that App Store Passwords are set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Media & Purchases 4. Verify that Free Downloads is set to your organization's requirements 5. Verify that Purchases and In-App Purchases is set to your organization's requirements

조치 방법

조치 방식: 가이드 또는 인프라 패치

Graphical Method: Perform the following steps to set App Store Passwords to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Media & Purchases 4. Set Free Downloads to your organization's requirements 5. Set Purchases and In-App Purchases to your organization's requirements

속성

운영 체제: macos-14
태그: authloggingmacossonoma
참고 자료: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.1.2 Audit App Store Password Settings