Ensure Software Update Deferment Is Less Than or Equal to 30 Days

ВисокаНиво 1Аутоматскаmacos

Опис

Apple provides the capability to manage software updates on Apple devices through mobile device management. Part of those capabilities permit organizations to defer software updates and allow for testing. Many organizations have specialized software and configurations that may be negatively impacted by Apple updates. If software updates are deferred, they should not be deferred for more than 30 days. Audit: No deferral profile (no value) passes, as the benchmark states.

Како се проверава

Метод провере: Команда љуске

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let delay = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('enforcedSoftwareUpdateDelay'))
  if ( delay == null || delay <= 30 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Очекивани излаз: true

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Profile (preferred): com.apple.applicationaccess enforcedSoftwareUpdateDelay = <integer><1-30></integer>.

Својства

Оперативни системи: macos-26
Ознаке: macossoftware-update
Референца: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.6 Ensure Software Update Deferment Is Less Than or Equal to 30 Days

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target macos