macOS
TMA-MACOS14-6.4.1
Ensure Secure Keyboard Entry Terminal.app Is Enabled
说明
Secure Keyboard Entry prevents other applications on the system and/or network from detecting and recording what is typed into Terminal. Unauthorized applications and malicious code could intercept keystrokes entered in the Terminal. Enabling Secure Keyboard Entry minimizes the risk of a key logger detecting what is entered in Terminal.
检查方式
审计方法: Shell 命令
/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.Terminal').objectForKey('SecureKeyboardEntry').js
EOS- 预期输出
true
修复方式
修复方法: 操作指南或基础设施补丁
Date Version Changes for this version Oct 31, 2025 3.0.0 2.9.1 – Updated Impact Statement Oct 31, 2025 3.0.0 6.1.1 – Updated Title and switched to a Manual recommendation Oct 31, 2025 3.0.0 6.3 - Updated Description Oct 31, 2025 3.0.0 7.4 – Added to Supplemental from removed recommendation 1.7 Oct 31, 2025 3.0.0 Updated Benchmark Release May 15, 2026 3.1.0 Draft Update Released Jun 1, 2026 3.1.0 2.3.5 - Device Management Sub-Section Added Jun 1, 2026 3.1.0 2.7.1 – Updated Title, Audit, and Remediation to focus on the current user Jun 1, 2026 3.1.0 2.10.1.2 – Updated Audit for better device check Jun 1, 2026 3.1.0 3.4 – Updated Title, Description, Impact Statement, Audit, and Remediation to retain logs for 30 days with no maximum Jun 1, 2026 3.1.0 3.5 – Updated Remediation to access of 700 from 440 Jun 1, 2026 3.1.0 5.1.6 – Updated Audit to output any error codes to null Jun 1, 2026 3.1.0 5.1.7 – Updated Audit to ignore non-accessible folder Date Version Changes for this version Jun 1, 2026 3.1.0 5.3 – Description updated to refer to new recommendations Jun 1, 2026 3.1.0 5.3.1 and 5.3.2 – Original Recommendations removed and replace Jun 1, 2026 3.1.0 5.3.1 – Added Recommendation...
属性
- 操作系统
- macos-14
- 标签
- cryptomacossonoma
- 参考
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 6.4.1 Ensure Secure Keyboard Entry Terminal.app Is Enabled
检查本机
请在您有权审计的机器上运行此命令。扫描为只读操作。
tmaegis scan --target macos