TMA-MACOS-2.6.5

Ensure Gatekeeper Is Enabled

YüksekDüzey 1Otomatikmacos

Açıklama

Gatekeeper is Apple’s application that utilizes allowlisting to restrict downloaded applications from launching. It functions as a control to limit applications from unverified sources from running without authorization. In an update to Gatekeeper in macOS 13 Ventura, Gatekeeper checks every application on every launch, not just quarantined apps.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

/usr/sbin/spctl --status 2>&1

Beklenen çıktı: assessments enabled

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Profile (preferred): com.apple.systempolicy.control AllowIdentifiedDevelopers = <true/>; com.apple.systempolicy.control EnableAssessment = <true/>. GUI: System Settings > Privacy & Security > Set 'Allow apps downloaded from' to 'App Store and identified developers'.

Özellikler

İşletim sistemleri: macos-26
Etiketler: macossystem-settings
Referans: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.6.5 Ensure Gatekeeper Is Enabled

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target macos