Ensure Listen for (Siri) Is Disabled

NiskaNivo 1Ručni pregledmacos

Opis

macOS includes the Siri digital assistant and if enabled it is always listening in case it is needed. In Sonoma a user may choose either "Hey Siri" or either "Siri" and "Hey Siri." In either case, Siri is using the microphone at all times to listen for instructions and then can record questions once activated. In an organizational environment where people are talking and listening on video/voice calls, there are too many opportunities for unauthorized information disclosure to have a live microphone at all times. If Siri will be used it may be on, with "Listen for" Off and a keyboard shortcut selected. Note: Currently this recommendation cannot be disabled either globally with a profile or individually with a plist change, but only through the GUI. Due to this, we are moving this recommendation to be manual (but still disabled) and disabling Siri until it is possible to disable Listen...

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Graphical Method: Perform the following steps to ensure that "Hey Siri" is disabled: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has VoiceTriggerUserEnabled set to 0 Terminal Method: Run the following command to verify that "Hey Siri" is disabled: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.Siri')\ .objectForKey('VoiceTriggerUserEnabled').js EOS false

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.Siri 2. The key to include is set to VoiceTriggerUserEnabled 3. The key must be set to <false/> Note: After testing, this profile will disable Hey Siri only for the first input but not additional inputs. This issues seems to only occur using the Apple Studio Display (and possibly the Pro Display XDR, but no testing has occurred with that device) and it is not the primary input source. We are going to continue testing, but this seems to be an edge case.

Svojstva

Operativni sistemi: macos-14
Oznake: macossonoma
Referenca: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.5.2 Ensure Listen for (Siri) Is Disabled