macOS
TMA-MACOS-2.3.3.10
Ensure Bluetooth Sharing Is Disabled
Опис
Bluetooth Sharing allows files to be exchanged with Bluetooth-enabled devices. This setting only disables the receiving of files and requires both devices to be paired through Bluetooth as well as accepted by the receiver. This setting does not disable the ability to send files from the device to another paired Bluetooth device. Audit: Checks PrefKeyServicesEnabled for every local user (UID > 500); an unset key is the off-by-default state.
Како се проверава
Метод провере: Команда љуске
ul=$(/usr/bin/dscl . -list /Users UniqueID 2>/dev/null) || exit 1
bad=""
for u in $(printf '%s\n' "$ul" | /usr/bin/awk '$2 > 500 {print $1}'); do
v=$(/usr/bin/sudo -u "$u" /usr/bin/defaults -currentHost read com.apple.Bluetooth PrefKeyServicesEnabled 2>/dev/null)
[ -n "$v" ] && [ "$v" != 0 ] && bad="$bad $u"
done
if [ -z "$bad" ]; then echo compliant; else echo "Bluetooth Sharing enabled for:$bad"; fi- Очекивани излаз
compliant
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Terminal: sudo -u <username> /usr/bin/defaults -currentHost write com.apple.Bluetooth PrefKeyServicesEnabled -bool false ; sudo -u firstuser /usr/bin/defaults -currentHost write com.apple.Bluetooth PrefKeyServicesEnabled -bool false. GUI: System Settings > General > Sharing > Set Bluetooth Sharing to disabled.
Својства
- Оперативни системи
- macos-26
- Ознаке
- macossystem-settings
- Референца
- CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.10 Ensure Bluetooth Sharing Is Disabled
Проверите овај рачунар
Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.
tmaegis scan --target macos