Audit Notification Settings

НизкийУровень 1Ручная проверкаmacos

Описание

Notification capabilities are designed to allow users to receive updates from applications that are not currently in use. These can be background applications or even notices from processes running on a computer that is not currently being actively used. Where the screen of a computer is visible to others other than the logged-in user due to shared working spaces or public spaces, consideration should be given to the exposure of sensitive data in notifications. Applications that use the system-wide application service may be individually managed, and applications that might expose confidential information to unauthorized users should not expose notifications except to the current user, especially on the locked screen when the computer may be unattended. Some work environments will handle sensitive or confidential information with applications that can provide notifications to anyone w...

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Graphical Method: Perform the following steps to verify that Notifications are set to your organization's requirements: 1. Open System Settings 2. Select Notifications 3. Verify that Show previews for each application is set to your organization's requirements Note: If the exposure of controlled information or data leakage is possible with application notifications, the acceptable notification level should be established through a risk analysis of what unauthorized leaks may occur.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Graphical Method: Perform the following steps to set Notifications to your organization's requirements: 1. Open System Settings 2. Select Notifications 3. Select any applications that are not in compliance with your organization's requirements 4. Turn off or mute notifications that may expose information to unauthorized people that might be able to view screens of organizational computers.

Свойства

Операционные системы: macos-14
Теги: loggingmacossonoma
Источник: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.15.1 Audit Notification Settings