Ensure Install of macOS Updates Is Enabled

보통레벨 1자동macos

설명

Ensure that macOS updates are installed after they are available from Apple. This setting enables macOS updates to be automatically installed. Some environments will want to approve and test updates before they are delivered. It is best practice to test first where updates can and have caused disruptions to operations.

점검 방법

감사 방식: 셸 명령

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate').objectForKey('AutomaticallyInstallMacOSUpdates').js
EOS

예상 출력: true

조치 방법

조치 방식: 가이드 또는 인프라 패치

Profile (preferred): com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates = <true/>. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates -bool TRUE. GUI: System Settings > General > Software Update > i > Set Install macOS updates to enabled > Done.

속성

운영 체제: macos-15
태그: macossoftware-update
참고 자료: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 1.3 Ensure Install of macOS Updates Is Enabled

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target macos