Ensure On-Device Dictation Is Enabled

低级别 1自动化macos

说明

In macOS 14.0 Sonoma, Apple released the ability to limit dictation to staying on-device and not sending data to the Siri servers. The use of dictation is likely to include editing documents with confidential information. While Apple does have controls to obfuscate voice data that exists on their servers, it is recommended that Dictation-collected information does not leave the local Mac.

检查方式

审计方法: Shell 命令

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('forceOnDeviceOnlyDictation').js
EOS

预期输出: true

修复方式

修复方法: 操作指南或基础设施补丁

Profile (preferred): com.apple.applicationaccess forceOnDeviceOnlyDictation = <true/>.

属性

操作系统: macos-26
标签: macossystem-settings
参考: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.18.1 Ensure On-Device Dictation Is Enabled

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target macos