Ensure the OS Is Not Active When Resuming from Standby (Intel)

中级别 2人工审核macos

说明

In order to use a computer with Full Disk Encryption (FDE), macOS must keep encryption keys in memory to allow the use of the disk that has been FileVault protected. The storage volume has been unlocked and acts as if it were not encrypted. When the system is not in use, the volume is protected through encryption.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Terminal: sudo /usr/sbin/system_profiler SPHardwareDataType | /usr/bin/grep -e MacBook ; sudo /usr/bin/pmset -b -g | /usr/bin/grep -e standby If there is an output, run the following: % /usr/bin/sudo /usr/bin/pmset -b -g | /usr/bin/grep -e standby The output should include a standbydelaylow value ≤ 900, a standbydelayhigh value ≤ 900, and a highstandbythreshol

修复方式

修复方法: 操作指南或基础设施补丁

Terminal: sudo /usr/bin/pmset -a standbydelaylow <value≤900> ; sudo /usr/bin/pmset -a standbydelayhigh <value≤900> ; sudo /usr/bin/pmset -a highstandbythreshold <value≥90>.

属性

操作系统: macos-26
标签: macossystem-settings
参考: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.10.1.1 Ensure the OS Is Not Active When Resuming from Standby (Intel)