Ensure 'Show Status Bar' is not 'Hidden'

ВысокийУровень 1Автоматическаяsafari

Описание

This setting controls whether mousing over a link displays the full URL that the link will follow. Rationale: Showing the full URL allows users to validate that a link is performing the action it claims, and may prevent users from following malicious links. Audit reads ShowOverlayStatusBar from the com.apple.Safari preference domain of the account running the scan (the PDF checks the same token in com.apple.Safari.plist; manual check: Follow the below steps and verify that Show Status Bar is not 'Hidden`: 1. Click View. 2. Verify Hide Status bar is displayed.). Safari is sandboxed, so the reading process needs Full Disk Access on macOS 10.14+. A missing key exits non-zero and is reported as FAIL even where the built-in default is compliant. Values forced by a configuration profile live in /Library/Managed Preferences and are not read here.

Как проверяется

Метод проверки: Команда оболочки

shell

out=$(defaults read com.apple.Safari ShowOverlayStatusBar 2>/dev/null) || exit 1; printf '%s\n' "$out"

Ожидаемый вывод: 1

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Follow the below steps to set Show Status Bar: 1. Click View. 2. Click Show Status Bar. Or deploy a configuration profile for com.apple.Safari setting ShowOverlayStatusBar = true, or as the logged-in user run: defaults write com.apple.Safari ShowOverlayStatusBar -bool true and restart Safari.

Свойства

Операционные системы: Любая
Теги: safaribrowsercis-l1
Источник: CIS macOS Safari Benchmark v2.0.0 - 11.1 Ensure 'Show Status Bar' is not 'Hidden'

Проверить этот хост

Выполните команду на компьютере, аудит которого вам разрешён. Сканирование работает только на чтение.

shell

tmaegis scan --target safari