macOS
TMA-MACOS-5.3.3
Audit Connected FAT32 and ExFAT Drives
Descrição
While FAT32 and exFAT offer cross-platform convenience, they introduce critical security gaps. These formats do not support encryption without third-party products (on any platform). Consequently, FAT32 and exFAT should be reserved strictly for temporary, non-sensitive data transfers, while any sustained use or sensitive data storage should utilize APFS (Encrypted).
Como é verificado
Método de auditoria: Revisão manual
Terminal: diskutil list external | grep -E 'DOS_FAT_32|Microsoft Basic Data' Any FAT32 or ExFAT drives connected should meet your organization's existing device policies for external drives.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Any connected FAT32 or ExFAT volumes need to be audited to verify that they meet your organization's existing device policies for external drives.
Propriedades
- Sistemas operacionais
- macos-26
- Tags
- macossystem-access
- Referência
- CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 5.3.3 Audit Connected FAT32 and ExFAT Drives