TMAegisBeta
macos için daha fazla kural

macOS

TMA-MACOS14-6.3.3

Ensure Warn When Visiting A Fraudulent Website in Safari Is Enabled

OrtaDüzey 1Otomatikmacos

Açıklama

Apple uses the Google Safe Browsing API to check for fraudulent websites and report them to the user attempting to visit one. Attackers use crafted web pages to social engineer users to load unwanted content. Warning users prior to loading the content enables better security.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell
out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -E 'WarnAboutFraudulentWebsites' | /usr/bin/tr -d ' '
Beklenen çıktı
WarnAboutFraudulentWebsites=1;

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.Safari 2. The key to include is WarnAboutFraudulentWebsites 3. The key must be set to: <true/>

Özellikler

İşletim sistemleri
macos-14
Etiketler
macossonoma
Referans
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.3.3 Ensure Warn When Visiting A Fraudulent Website in Safari Is Enabled

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell
tmaegis scan --target macos