Ensure a Login Window Banner Exists

SrednjaNivo 2Automatskamacos

Opis

A Login window banner warning informs the user that the system is reserved for authorized use only. It enforces an acknowledgment by the user that they have been informed of the use policy in the banner if required. The system recognizes either the .txt and the .rtf formats. Audit: A /Library/Security/PolicyBanner.* file must exist and its mode must have 4 as the third digit.

Kako se proverava

Metod provere: Komanda ljuske

shell

set -- /Library/Security/PolicyBanner.*
[ -e "$1" ] || exit 1
for f in "$@"; do
  p=$(/usr/bin/stat -f %A "$f") || exit 1
  case "$p" in ??4) ;; *) echo "$f mode $p"; exit 0;; esac
done
echo compliant

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Terminal: sudo /bin/chmod o+r /Library/Security/PolicyBanner.txt ; sudo /bin/chmod o+r /Library/Security/PolicyBanner.rtf.

Svojstva

Operativni sistemi: macos-15
Oznake: macossystem-access
Referenca: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 5.8 Ensure a Login Window Banner Exists

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target macos --level 2