Ensure Location Services Is Enabled

НизкийУровень 2Автоматическаяmacos

Описание

macOS uses location information gathered through local Wi-Fi networks to enable applications to supply relevant information to users. With the operating system verifying the location, users do not need to change the time or the time zone. The computer will change them based on the user's location. They do not need to specify their location for weather or travel times, and they will receive alerts on travel times to meetings and appointments where location information is supplied. Location Services simplify some processes with mobile computers, such as asset management and time or log management. There are some use cases where it is important that the computer not be able to report its exact location. While the general use case is to enable Location Services, it should not be allowed if the physical location of the computer and the user should not be public knowledge. Location Services...

Как проверяется

Метод проверки: Команда оболочки

shell

n=$(/bin/launchctl list 2>/dev/null | /usr/bin/grep -c com.apple.locationd)
e=$(/usr/bin/sudo -u _locationd /usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.locationd').objectForKey('LocationServicesEnabled').js
EOS
) || exit 1
if [ "${n:-0}" -ge 1 ] && [ "$e" = true ]; then echo compliant; else echo "locationd=$n LocationServicesEnabled=${e:-unset}"; fi

Ожидаемый вывод: compliant

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Graphical Method: Perform the following steps to enable Location Services: 1. Open System Settings 2. Select Privacy & Security 3. Select Location Services 4. Set Location Services to enabled Terminal Method: Run the following command to enable Location Services: % /usr/bin/sudo /bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.locationd.plist If the com.apple.locationd.plist outputs 0, run the following command to also ensure Location Services is running: % /usr/bin/sudo /usr/bin/defaults write /var/db/locationd/Library/Preferences/ByHost/com.apple.locationd LocationServicesEnabled -bool true % /usr/bin/sudo /usr/bin/killall locationd Note: In some use cases, organizations may not want Location Services running. To disable Location Services, run the command: /usr/bin/sudo /usr/bin/defaults write /var/db/locationd/Library/Preferences/ByHost/com.apple.locationd LocationServicesEnabled -bool false

Свойства

Операционные системы: macos-14
Теги: macossonoma
Источник: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.6.1.1 Ensure Location Services Is Enabled

Проверить этот хост

Выполните команду на компьютере, аудит которого вам разрешён. Сканирование работает только на чтение.

shell

tmaegis scan --target macos --level 2