Ensure the OS Is Not Active When Resuming from Standby (Intel)

보통레벨 2수동 검토macos

설명

In order to use a computer with Full Disk Encryption (FDE), macOS must keep encryption keys in memory to allow the use of the disk that has been FileVault protected. The storage volume has been unlocked and acts as if it were not encrypted. When the system is not in use, the volume is protected through encryption.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Terminal: sudo /usr/sbin/system_profiler SPHardwareDataType | /usr/bin/grep -e MacBook ; sudo /usr/bin/pmset -b -g | /usr/bin/grep -e standby If there is an output, run the following: % /usr/bin/sudo /usr/bin/pmset -b -g | /usr/bin/grep -e standby The output should include a standbydelaylow value ≤ 900, a standbydelayhigh value ≤ 900, and a highstandbythreshol

조치 방법

조치 방식: 가이드 또는 인프라 패치

Terminal: sudo /usr/bin/pmset -a standbydelaylow <value≤900> ; sudo /usr/bin/pmset -a standbydelayhigh <value≤900> ; sudo /usr/bin/pmset -a highstandbythreshold <value≥90>.

속성

운영 체제: macos-15
태그: macossystem-settings
참고 자료: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.10.1.1 Ensure the OS Is Not Active When Resuming from Standby (Intel)