Ensure Media Sharing Is Disabled

낮음레벨 2자동macos

설명

Starting with macOS 10.15, Apple has provided a control which permits a user to share Apple downloaded content on all Apple devices that are signed in with the same Apple Account. This allows users to share downloaded Movies, Music, or TV shows with other controlled macOS, iOS and iPadOS devices, as well as photos with Apple TVs. With this capability, guest users can also use media downloaded on the computer.

점검 방법

감사 방식: 셸 명령

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharing'))
  let pref2 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharingModification'))
  if ( pref1 == 0 && pref2 == 0 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

예상 출력: true

조치 방법

조치 방식: 가이드 또는 인프라 패치

Profile (preferred): com.apple.applicationaccess allowMediaSharing = <false/>; com.apple.applicationaccess allowMediaSharingModification = <false/>.

속성

운영 체제: macos-15
태그: macossystem-settings
참고 자료: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.3.9 Ensure Media Sharing Is Disabled

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target macos --level 2