macOS
TMA-MACOS15-2.3.4.2
Ensure Time Machine Volumes Are Encrypted If Time Machine Is Enabled
Descrição
One of the most important security tools for data protection on macOS is FileVault. With encryption in place, it makes it difficult for an outside party to access your data if they get physical possession of the computer. One very large weakness in data protection with FileVault is the level of protection on backup volumes. Audit: Time Machine not configured counts as compliant (no NotEncrypted destination).
Como é verificado
Método de auditoria: Comando shell
[ -x /usr/bin/defaults ] || exit 1
out=$(/usr/bin/defaults read /Library/Preferences/com.apple.TimeMachine.plist 2>/dev/null)
printf '%s\n' "$out" | /usr/bin/grep -c NotEncrypted || true- Saída esperada
0
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
GUI: System Settings > General > Time Machine > unencrypted drive > - to forget that drive as a destination > + to add a different drive as the destination > Set Up Disk > Set Encrypt Backup to enabled > Enter a password in the New Password and the same password in the Re-enter Password fields > A password hint is required, but it is recommended that you do not use any identifying information for the password.
Propriedades
- Sistemas operacionais
- macos-15
- Tags
- macossystem-settings
- Referência
- CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.4.2 Ensure Time Machine Volumes Are Encrypted If Time Machine Is Enabled
Verificar este host
Execute isto em uma máquina que você tenha permissão para auditar. A varredura é somente leitura.
tmaegis scan --target macos