Apple Safari
TMA-SAFARI-7.1
Ensure 'Cookies and website data' is set to 'Allow from websites I visit'
Mô tả
This setting Allow from websites I visit allows all first-party cookies and blocks all third-party cookies. Rationale: Blocking third party cookies can help protect a user's privacy by eliminating some tracking cookies. Audit reads BlockStoragePolicy from the com.apple.Safari preference domain of the account running the scan (the PDF checks the same token in com.apple.Safari.plist; manual check: Follow the below steps and verify that Cookies and website data is set to Allow from websites I visit: 1. Click Safari. 2. Click Preferences. 3. Click Privacy. 4. Verify Cookies and website data is se). Safari is sandboxed, so the reading process needs Full Disk Access on macOS 10.14+. A missing key exits non-zero and is reported as FAIL even where the built-in default is compliant. Values forced by a configuration profile live in /Library/Managed Preferences and are not read here.
Cách kiểm tra
Phương pháp kiểm tra: Lệnh shell
out=$(defaults read com.apple.Safari BlockStoragePolicy 2>/dev/null) || exit 1; printf '%s\n' "$out"- Đầu ra mong đợi
3
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Follow the below steps to set Cookies and website data to Allow from websites I visit: 1. Click Safari. 2. Click Preferences. 3. Click Privacy. 4. Set Cookies and website data to Allow from websites I visit. Or deploy a configuration profile for com.apple.Safari setting BlockStoragePolicy = 3, or as the logged-in user run: defaults write com.apple.Safari BlockStoragePolicy -int 3 and restart Safari.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- safaribrowsercis-l1
- Tham chiếu
- CIS macOS Safari Benchmark v2.0.0 - 7.1 Ensure 'Cookies and website data' is set to 'Allow from websites I visit'
Kiểm tra máy này
Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.
tmaegis scan --target safari