TMAegisBeta
Thêm quy tắc cho macos

macOS

TMA-MACOS-2.7.1

Ensure Screen Saver Hot Corners Are Secure For Current User

ThấpCấp 1Tự độngmacos

Mô tả

Hot Corners can be configured to disable the screen saver by moving the mouse cursor to a corner of the screen. This can only be accomplished by the current user, so that is the only user that needs to be audited. Audit: Checks the console user (or loginwindow lastUserName); no corner may be set to 6 (Disable Screen Saver).

Cách kiểm tra

Phương pháp kiểm tra: Lệnh shell

shell
[ -x /usr/bin/defaults ] || exit 1
u=$(/usr/bin/stat -f%Su /dev/console 2>/dev/null)
[ -n "$u" ] && [ "$u" != root ] || u=$(/usr/bin/defaults read /Library/Preferences/com.apple.loginwindow lastUserName 2>/dev/null) || exit 1
bad=""
for c in bl tl tr br; do
  v=$(/usr/bin/defaults read "/Users/$u/Library/Preferences/com.apple.dock" "wvous-$c-corner" 2>/dev/null)
  [ "$v" = 6 ] && bad="$bad $c"
done
if [ -z "$bad" ]; then echo compliant; else echo "hot corner set to disable screen saver:$bad"; fi
Đầu ra mong đợi
compliant

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Terminal: sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-bl-corner 2>/dev/null ; sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tl-corner 2>/dev/null ; sudo -u <current user> /usr/bin/defaults delete /Users/<current user>/Library/Preferences/com.apple.dock wvous-tr-corner 2>/dev/null. GUI: System Settings > Desktop & Dock > Hot Corners > Set and hot corner that is set to Disable Screen Saver to a setting that matches your organizational requirements.

Thuộc tính

Hệ điều hành
macos-26
Thẻ
macossystem-settings
Tham chiếu
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.7.1 Ensure Screen Saver Hot Corners Are Secure For Current User

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell
tmaegis scan --target macos