TMAegisBeta
Thêm quy tắc cho macos

macOS

TMA-MACOS14-2.1.1.2

Audit iCloud Drive

ThấpCấp 2Xem xét thủ côngmacos

Mô tả

iCloud Drive is Apple's storage solution for applications on both macOS and iOS to use the same files that are resident in Apple's cloud storage. The iCloud Drive folder is available much like Dropbox, Microsoft OneDrive, or Google Drive. One of the concerns in public cloud storage is that proprietary data may be inappropriately stored in an end user's personal repository. Organizations that need specific controls on information should ensure that this service is turned off or the user knows what information must be stored on services that are approved for storage of controlled information. Organizations should review third party storage solutions pertaining to existing data confidentiality and integrity requirements.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Graphical Method: Perform the following steps to verify if a profile is installed to configure iCloud Drive: 1. Open System Settings 2. Select General 3. Select Device Management 4. Verify that an installed profile has Disallow iCloud Drive set to your organization's requirements Terminal Method: Run the following command to verify that a profile is installed that sets iCloud Drive sync to your organization's settings: % /usr/bin/sudo /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowCloudDocumentSync').js EOS If the output is false, iCloud Drive Sync is disabled. If the output is true, iCloud Drive sync is enabled.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is allowCloudDocumentSync 3. The key should be set <true/>, to allow iCloud Drive, or <false/>, to disable it, based on your organization's requirements

Thuộc tính

Hệ điều hành
macos-14
Thẻ
loggingmacossonoma
Tham chiếu
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.1.1.2 Audit iCloud Drive