Audit Software Inventory

낮음레벨 2수동 검토macos

설명

With the introduction of Mac OS X 10.6.6, Apple added a new application, App Store, which resides in the Applications directory. This application allows a user with admin privileges and an Apple ID to browse Apple's online App Store, purchase (including no- cost purchases), and install new applications, bypassing Enterprise software inventory controls. Any admin user can install software in the /Applications directory whether from internet downloads, thumb drives, optical media, cloud storage, or even binaries through email. Even standard users can run executables downloaded to their home folder by default. The source of the software is not nearly as important as a consistent audit of all installed software for patch compliance and appropriateness. A single user desktop where the user, administrator, and the person approving software are all the same person probably does not need to a...

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Graphical Mode: Perform the following steps to access System Information: 1. Open /Applications/Utilities/System Information 2. Select Software 3. Select System Report 4. Select Applications 5. Verify that no Applications listed are against your organization's requirements 6. Select Installations 7. Verify that no Installations listed are against your organization's requirements Terminal Method: Run the following command to view all System Profiler details % /usr/bin/sudo /usr/sbin/system_profiler SPApplicationsDataType

조치 방법

조치 방식: 가이드 또는 인프라 패치

Delete any unnecessary applications from the system.

속성

운영 체제: macos-14
태그: loggingmacossonoma
참고 자료: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 3.7 Audit Software Inventory