Ensure Install of macOS Updates Is Enabled

中级别 1自动化macos

说明

Ensure that macOS updates are installed after they are available from Apple. This setting enables macOS updates to be automatically installed. Some environments will want to approve and test updates before they are delivered. It is best practice to test first where updates can and have caused disruptions to operations.

检查方式

审计方法: Shell 命令

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate').objectForKey('AutomaticallyInstallMacOSUpdates').js
EOS

预期输出: true

修复方式

修复方法: 操作指南或基础设施补丁

Profile (preferred): com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates = <true/>. Terminal: sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticallyInstallMacOSUpdates -bool TRUE. GUI: System Settings > General > Software Update > i > Set Install macOS updates to enabled > Done.

属性

操作系统: macos-15
标签: macossoftware-update
参考: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 1.3 Ensure Install of macOS Updates Is Enabled

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target macos