Ensure Media Sharing Is Disabled

НискаНиво 2Аутоматскаmacos

Опис

Starting with macOS 10.15, Apple has provided a control which permits a user to share Apple downloaded content on all Apple devices that are signed in with the same Apple Account. This allows users to share downloaded Movies, Music, or TV shows with other controlled macOS, iOS and iPadOS devices, as well as photos with Apple TVs. With this capability, guest users can also use media downloaded on the computer.

Како се проверава

Метод провере: Команда љуске

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharing'))
  let pref2 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowMediaSharingModification'))
  if ( pref1 == 0 && pref2 == 0 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Очекивани излаз: true

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Profile (preferred): com.apple.applicationaccess allowMediaSharing = <false/>; com.apple.applicationaccess allowMediaSharingModification = <false/>.

Својства

Оперативни системи: macos-15
Ознаке: macossystem-settings
Референца: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.3.9 Ensure Media Sharing Is Disabled

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target macos --level 2