TMAegisBeta
Više pravila za macos

macOS

TMA-MACOS-2.3.3.10

Ensure Bluetooth Sharing Is Disabled

SrednjaNivo 1Automatskamacos

Opis

Bluetooth Sharing allows files to be exchanged with Bluetooth-enabled devices. This setting only disables the receiving of files and requires both devices to be paired through Bluetooth as well as accepted by the receiver. This setting does not disable the ability to send files from the device to another paired Bluetooth device. Audit: Checks PrefKeyServicesEnabled for every local user (UID > 500); an unset key is the off-by-default state.

Kako se proverava

Metod provere: Komanda ljuske

shell
ul=$(/usr/bin/dscl . -list /Users UniqueID 2>/dev/null) || exit 1
bad=""
for u in $(printf '%s\n' "$ul" | /usr/bin/awk '$2 > 500 {print $1}'); do
  v=$(/usr/bin/sudo -u "$u" /usr/bin/defaults -currentHost read com.apple.Bluetooth PrefKeyServicesEnabled 2>/dev/null)
  [ -n "$v" ] && [ "$v" != 0 ] && bad="$bad $u"
done
if [ -z "$bad" ]; then echo compliant; else echo "Bluetooth Sharing enabled for:$bad"; fi
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Terminal: sudo -u <username> /usr/bin/defaults -currentHost write com.apple.Bluetooth PrefKeyServicesEnabled -bool false ; sudo -u firstuser /usr/bin/defaults -currentHost write com.apple.Bluetooth PrefKeyServicesEnabled -bool false. GUI: System Settings > General > Sharing > Set Bluetooth Sharing to disabled.

Svojstva

Operativni sistemi
macos-26
Oznake
macossystem-settings
Referenca
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.10 Ensure Bluetooth Sharing Is Disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target macos