Ensure 'Warn when visiting a fraudulent website' is 'Enabled'

Trung bìnhCấp 1Tự độngsafari

Mô tả

Safari can be configured to alert the user that the site they are visiting is known to be malicious. It is recommended that this capability be enabled. Rationale: Users will be alerted about known malicious web sites, thus decreasing the probability of a user’s browser or system being exploited by known malware or phishing site. Audit reads WarnAboutFraudulentWebsites from the com.apple.Safari preference domain of the account running the scan (the PDF checks the same token in com.apple.Safari.plist; manual check: Follow the below steps and verify that Warn when visiting a fraudulent website is Enabled: 1. Click Safari. 2. Click Preferences. 3. Click Security. 4. Verify Warn when visiting a fraudulent website i). Safari is sandboxed, so the reading process needs Full Disk Access on macOS 10.14+. A missing key exits non-zero and is reported as FAIL even where the built-in default is compliant. Values forced by a configuration profile live in /Library/Managed Preferences and are not read here.

Cách kiểm tra

Phương pháp kiểm tra: Lệnh shell

shell

out=$(defaults read com.apple.Safari WarnAboutFraudulentWebsites 2>/dev/null) || exit 1; printf '%s\n' "$out"

Đầu ra mong đợi: 1

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Follow the below steps to set Warn when visiting a fraudulent website to Enabled: 1. Click Safari. 2. Click Preferences. 3. Click AutoFill. 4. Check the Warn when visiting a fraudulent website checkbox. Or deploy a configuration profile for com.apple.Safari setting WarnAboutFraudulentWebsites = true, or as the logged-in user run: defaults write com.apple.Safari WarnAboutFraudulentWebsites -bool true and restart Safari.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: safaribrowsercis-l1
Tham chiếu: CIS macOS Safari Benchmark v2.0.0 - 6.1 Ensure 'Warn when visiting a fraudulent website' is 'Enabled'

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell

tmaegis scan --target safari