Ensure Firewall Stealth Mode Is Enabled

检查方式

审计方法: Shell 命令

[ -x /usr/bin/osascript ] || exit 1
p=$(/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.security.firewall').objectForKey('EnableStealthMode').js
EOS
)
s=$(/usr/libexec/ApplicationFirewall/socketfilterfw --getstealthmode 2>/dev/null)
if [ "$p" = true ] || printf '%s' "$s" | /usr/bin/grep -q 'stealth mode is on'; then echo compliant; else echo "EnableStealthMode=${p:-unset}; $s"; fi

预期输出

compliant

修复方式

修复方法: 操作指南或基础设施补丁

Graphical Method: Perform the following steps to enable firewall stealth mode: 1. Open System Settings 2. Select Network 3. Select Firewall 4. Select Options... 5. Set Enabled stealth mode to enabled Terminal Method: Run the following command to enable stealth mode: % /usr/bin/sudo /usr/libexec/ApplicationFirewall/socketfilterfw -- setstealthmode on Stealth mode enabled Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.security.firewall 2. The key to include is EnableStealthMode 3. The key must be set to <true/> Note: This key must be set in the same configuration profile with EnableFirewall set to <true/>. If it is set in its own configuration profile, it will fail.

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

tmaegis scan --target macos