Audit Show All Filename Extensions

低级别 1人工审核macos

说明

A filename extension is a suffix added to a base filename that indicates the base filename's file format. This is intended for any user that logs into the GUI and has a home folder and not for service accounts. For the audit, we will continue to verify that every account with a home folder has filename extensions enabled.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

GUI: Finder > Finder in the menu bar > Settings > Advanced > Verify that Show all filename extensions is set. Terminal: sudo -u <username> /usr/bin/defaults read /Users/<username>/Library/Preferences/.GlobalPreferences.plist AppleShowAllExtensions ; sudo -u firstuser /usr/bin/defaults read /Users/firstuser/Library/Preferences/.GlobalPreferences.plist AppleShowAllExtensions

修复方式

修复方法: 操作指南或基础设施补丁

Terminal: sudo -u <username> /usr/bin/defaults write /Users/<username>/Library/Preferences/.GlobalPreferences.plist AppleShowAllExtensions -bool true ; sudo killall Finder ; sudo -u seconduser /usr/bin/defaults write /Users/secondname/Library/Preferences/.GlobalPreferences.plist AppleShowAllExtensions -bool true. GUI: Finder > Finder in the menu bar > Settings > Advanced > Set Show all filename extensions to enabled.

属性

操作系统: macos-26
标签: macosapplications
参考: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 6.1.1 Audit Show All Filename Extensions