Ensure Secure Keyboard Entry Terminal.app Is Enabled

Como é verificado

Método de auditoria: Comando shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.Terminal').objectForKey('SecureKeyboardEntry').js
EOS

Saída esperada

true

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

Date Version Changes for this version Oct 31, 2025 3.0.0 2.9.1 – Updated Impact Statement Oct 31, 2025 3.0.0 6.1.1 – Updated Title and switched to a Manual recommendation Oct 31, 2025 3.0.0 6.3 - Updated Description Oct 31, 2025 3.0.0 7.4 – Added to Supplemental from removed recommendation 1.7 Oct 31, 2025 3.0.0 Updated Benchmark Release May 15, 2026 3.1.0 Draft Update Released Jun 1, 2026 3.1.0 2.3.5 - Device Management Sub-Section Added Jun 1, 2026 3.1.0 2.7.1 – Updated Title, Audit, and Remediation to focus on the current user Jun 1, 2026 3.1.0 2.10.1.2 – Updated Audit for better device check Jun 1, 2026 3.1.0 3.4 – Updated Title, Description, Impact Statement, Audit, and Remediation to retain logs for 30 days with no maximum Jun 1, 2026 3.1.0 3.5 – Updated Remediation to access of 700 from 440 Jun 1, 2026 3.1.0 5.1.6 – Updated Audit to output any error codes to null Jun 1, 2026 3.1.0 5.1.7 – Updated Audit to ignore non-accessible folder Date Version Changes for this version Jun 1, 2026 3.1.0 5.3 – Description updated to refer to new recommendations Jun 1, 2026 3.1.0 5.3.1 and 5.3.2 – Original Recommendations removed and replace Jun 1, 2026 3.1.0 5.3.1 – Added Recommendation...

Verificar este host

Execute isto em uma máquina que você tenha permissão para auditar. A varredura é somente leitura.

tmaegis scan --target macos