TMA-MACOS-1.6

Ensure Software Update Deferment Is Less Than or Equal to 30 Days

YüksekDüzey 1Otomatikmacos

Açıklama

Apple provides the capability to manage software updates on Apple devices through mobile device management. Part of those capabilities permit organizations to defer software updates and allow for testing. Many organizations have specialized software and configurations that may be negatively impacted by Apple updates. If software updates are deferred, they should not be deferred for more than 30 days. Audit: No deferral profile (no value) passes, as the benchmark states.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
  let delay = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('enforcedSoftwareUpdateDelay'))
  if ( delay == null || delay <= 30 ) {
    return("true")
  } else {
    return("false")
  }
}
EOS

Beklenen çıktı: true

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Profile (preferred): com.apple.applicationaccess enforcedSoftwareUpdateDelay = <integer><1-30></integer>.

Özellikler

İşletim sistemleri: macos-26
Etiketler: macossoftware-update
Referans: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 1.6 Ensure Software Update Deferment Is Less Than or Equal to 30 Days

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target macos