Ensure 'AutoFill web forms: Other forms' is 'Disabled'

СредњаНиво 2Аутоматскаsafari

Опис

Safari can store the information typed in forms for later use on other websites. It is recommended that Safari be configured such that it does not store and auto-fill form contents. Rationale: If Safari or other applications executing at equal or higher security contexts is compromised, potentially sensitive, persisted, form data is at increased risk. Audit reads AutoFillMiscellaneousForms from the com.apple.Safari preference domain of the account running the scan (the PDF checks the same token in com.apple.Safari.plist; manual check: Follow the below steps and verify that AutoFill web forms: Other forms is Disabled: 1. Click Safari. 2. Click Preferences. 3. Click AutoFill. 4. Verify AutoFill web forms: Other forms is unchecked.). Safari is sandboxed, so the reading process needs Full Disk Access on macOS 10.14+. A missing key exits non-zero and is reported as FAIL even where the built-in default is compliant. Values forced by a configuration profile live in /Library/Managed Preferences and are not read here.

Како се проверава

Метод провере: Команда љуске

shell

out=$(defaults read com.apple.Safari AutoFillMiscellaneousForms 2>/dev/null) || exit 1; printf '%s\n' "$out"

Очекивани излаз: 0

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Follow the below steps to set AutoFill web forms: Other forms to Disabled: 1. Click Safari. 2. Click Preferences. 3. Click AutoFill. 4. Uncheck AutoFill web forms: Other forms. Or deploy a configuration profile for com.apple.Safari setting AutoFillMiscellaneousForms = false, or as the logged-in user run: defaults write com.apple.Safari AutoFillMiscellaneousForms -bool false and restart Safari.

Својства

Оперативни системи: Било који
Ознаке: safaribrowsercis-l2
Референца: CIS macOS Safari Benchmark v2.0.0 - 3.3 Ensure 'AutoFill web forms: Other forms' is 'Disabled'

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target safari --level 2