TMAegis
Више правила за macos

macOS

TMA-MACOS-5.9

Ensure the Guest Home Folder Does Not Exist

ВисокаНиво 1Аутоматскаmacos

Опис

In the previous two controls, the guest account login has been disabled and sharing to guests has been disabled, as well. There is no need for the legacy Guest home folder to remain in the file system. When normal user accounts are removed, you have the option to archive it, leave it in place, or delete. In the case of the guest folder, the folder remains in place without a GUI option to remove it.

Како се проверава

Метод провере: Команда љуске

shell
out=$(/bin/ls /Users/ 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -cx Guest || true
Очекивани излаз
0

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Terminal: sudo /bin/rm -R /Users/Guest.

Својства

Оперативни системи
macos-26
Ознаке
macossystem-access
Референца
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 5.9 Ensure the Guest Home Folder Does Not Exist

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell
tmaegis scan --target macos