Ensure Prevent Cross-site Tracking in Safari Is Enabled

低级别 1自动化macos

说明

There is a vast network of groups that collect, use, and sell user data. One method used to collect user data is pay and provide content and services for website owners. Along with that "assistance," the site owners also push tracking cookies on visitors. In many cases the help allows a content owner to keep the site up. The tracking cookies allow information brokers to track web users across visited sites. Audit: All three keys must be present: BlockStoragePolicy=2, WebKitPreferences.storageBlockingPolicy=1, WebKitStorageBlockingPolicy=1.

检查方式

审计方法: Shell 命令

shell

out=$(/usr/sbin/system_profiler SPConfigurationProfileDataType 2>/dev/null | /usr/bin/tr -d ' ') || exit 1
if printf '%s\n' "$out" | /usr/bin/grep -qx 'BlockStoragePolicy=2;' && printf '%s\n' "$out" | /usr/bin/grep -qxF 'WebKitPreferences.storageBlockingPolicy=1;' && printf '%s\n' "$out" | /usr/bin/grep -qx 'WebKitStorageBlockingPolicy=1;'; then echo compliant; else echo noncompliant; fi

预期输出: compliant

修复方式

修复方法: 操作指南或基础设施补丁

Profile (preferred): com.apple.Safari BlockStoragePolicy = <integer>2</integer>; com.apple.Safari WebKitPreferences.storageBlockingPolicy = <integer>1</integer>; com.apple.Safari WebKitStorageBlockingPolicy = <integer>1</integer>.

属性

操作系统: macos-26
标签: macosapplications
参考: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 6.3.4 Ensure Prevent Cross-site Tracking in Safari Is Enabled

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target macos