TMA-MACOS-1.5

Ensure Install Security Responses and System Files Is Enabled

VisokaNivo 1Automatskamacos

Opis

Ensure that system and security updates are installed after they are available from Apple. This setting enables definition updates for XProtect and Gatekeeper. With this setting in place, new malware and adware that Apple has added to the list of malware or untrusted software will not execute. These updates do not require reboots or end user admin rights.

Kako se proverava

Metod provere: Komanda ljuske

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate').objectForKey('ConfigDataInstall'))
  let pref2 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate').objectForKey('CriticalUpdateInstall'))
  if ( pref1 == 1 && pref2 == 1 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Očekivani izlaz: true

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Profile (preferred): com.apple.SoftwareUpdate ConfigDataInstall = <true/>; com.apple.SoftwareUpdate CriticalUpdateInstall = <true/>. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate ConfigDataInstall -bool true ; sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate CriticalUpdateInstall -bool true. GUI: System Settings > General > Software Update > i > Set Install Security Responses and System files to enabled > Done.

Svojstva

Operativni sistemi: macos-26
Oznake: macossoftware-update
Referenca: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.5 Ensure Install Security Responses and System Files Is Enabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target macos