TMA-MACOS-2.6.5

Ensure Gatekeeper Is Enabled

VisokaNivo 1Automatskamacos

Opis

Gatekeeper is Apple’s application that utilizes allowlisting to restrict downloaded applications from launching. It functions as a control to limit applications from unverified sources from running without authorization. In an update to Gatekeeper in macOS 13 Ventura, Gatekeeper checks every application on every launch, not just quarantined apps.

Kako se proverava

Metod provere: Komanda ljuske

shell

/usr/sbin/spctl --status 2>&1

Očekivani izlaz: assessments enabled

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Profile (preferred): com.apple.systempolicy.control AllowIdentifiedDevelopers = <true/>; com.apple.systempolicy.control EnableAssessment = <true/>. GUI: System Settings > Privacy & Security > Set 'Allow apps downloaded from' to 'App Store and identified developers'.

Svojstva

Operativni sistemi: macos-26
Oznake: macossystem-settings
Referenca: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.5 Ensure Gatekeeper Is Enabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target macos