macOS
TMA-MACOS14-6.3.8
Audit AutoFill
Descrição
AutoFill capabilities in a Web Browser are a feature to allow a user to avoid re-typing the same user information in every form that a user encounters. Part of the modern internet consists of vendors establishing a seemingly close relationship with as many users as possible to market to them, data-mine from them and sell their data to third- party data aggregators. AutoFill can be a method for a user to share too much information with untrusted website owners. Many security professionals advise disabling AutoFill to reduce the risk of over-sharing. These security professionals appear to believe that manual data entry is better, since completing the required forms are often the only method to connect to needed data. The best method for security is to ensure that the data ready to be auto-filled is an acceptable risk to sites a user interacts with. Users must review what data they accep...
Como é verificado
Método de auditoria: Revisão manual
Graphical Method: Perform the following steps to verify AutoFill in Safari: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has safariAllowAutoFill set to your organization's requirements Terminal Method: Run the following command to verify that a profile is installed that sets autofill in Safari to your organization's requirements: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('safariAllowAutoFill').js EOS false
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is safariAllowAutoFill 3. The key must be set to <<true>or<false>/>
Propriedades
- Sistemas operacionais
- macos-14
- Tags
- loggingmacossonoma
- Referência
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.8 Audit AutoFill