Audit Software Inventory

低级别 2人工审核macos

说明

With the introduction of Mac OS X 10.6.6, Apple added a new application, App Store, which resides in the Applications directory. This application allows a user with admin privileges and an Apple ID to browse Apple's online App Store, purchase (including no- cost purchases), and install new applications, bypassing Enterprise software inventory controls. Any admin user can install software in the /Applications directory whether from internet downloads, thumb drives, optical media, cloud storage, or even binaries through email. Even standard users can run executables downloaded to their home folder by default. The source of the software is not nearly as important as a consistent audit of all installed software for patch compliance and appropriateness. A single user desktop where the user, administrator, and the person approving software are all the same person probably does not need to a...

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Graphical Mode: Perform the following steps to access System Information: 1. Open /Applications/Utilities/System Information 2. Select Software 3. Select System Report 4. Select Applications 5. Verify that no Applications listed are against your organization's requirements 6. Select Installations 7. Verify that no Installations listed are against your organization's requirements Terminal Method: Run the following command to view all System Profiler details % /usr/bin/sudo /usr/sbin/system_profiler SPApplicationsDataType

修复方式

修复方法: 操作指南或基础设施补丁

Delete any unnecessary applications from the system.

属性

操作系统: macos-14
标签: loggingmacossonoma
参考: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 3.7 Audit Software Inventory