Audit AutoFill

낮음레벨 2수동 검토macos

설명

AutoFill capabilities in a Web Browser are a feature to allow a user to avoid re-typing the same user information in every form that a user encounters. Part of the modern internet consists of vendors establishing a seemingly close relationship with as many users as possible to market to them, data-mine from them and sell their data to third- party data aggregators. AutoFill can be a method for a user to share too much information with untrusted website owners. Many security professionals advise disabling AutoFill to reduce the risk of over-sharing. These security professionals appear to believe that manual data entry is better, since completing the required forms are often the only method to connect to needed data. The best method for security is to ensure that the data ready to be auto-filled is an acceptable risk to sites a user interacts with. Users must review what data they accep...

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Graphical Method: Perform the following steps to verify AutoFill in Safari: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has safariAllowAutoFill set to your organization's requirements Terminal Method: Run the following command to verify that a profile is installed that sets autofill in Safari to your organization's requirements: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('safariAllowAutoFill').js EOS false

조치 방법

조치 방식: 가이드 또는 인프라 패치

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is safariAllowAutoFill 3. The key must be set to <<true>or<false>/>

속성

운영 체제: macos-14
태그: loggingmacossonoma
참고 자료: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.8 Audit AutoFill