TMAegisBeta
Više pravila za macos

macOS

TMA-MACOS-2.11.3

Ensure a Custom Message for the Login Screen Is Enabled

NiskaNivo 1Automatskamacos

Opis

An access warning informs the user that the system is reserved for authorized use only, and that the use of the system may be monitored. Audit: Verify the text itself matches the organisation-approved message.

Kako se proverava

Metod provere: Komanda ljuske

shell
/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let msg = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.loginwindow').objectForKey('LoginwindowText'))
  if ( msg != null && String(msg).trim().length > 0 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS
Očekivani izlaz
true

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Profile (preferred): com.apple.loginwindow LoginwindowText = <string><Your organization's required. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "<custom message>" ; sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Center for Internet Security Test Message". GUI: System Settings > Lock Screen > Set Show message when locked to enabled > Set > Insert text in the Set a message to appear on the lock screen that matches your organization's required text > Done.

Svojstva

Operativni sistemi
macos-26
Oznake
macossystem-settings
Referenca
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.11.3 Ensure a Custom Message for the Login Screen Is Enabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target macos