Ensure Power Nap Is Disabled for Intel Macs

低级别 1自动化macos

说明

Power Nap allows the system to stay in low power mode, especially while on battery power, and periodically connect to previously known networks with stored credentials for user applications to phone home and get updates. This capability requires FileVault to remain unlocked and the use of previously joined networks to be risk accepted based on the SSID without user input. Audit: Intel Macs only; Apple silicon reports 0 (not applicable).

检查方式

审计方法: Shell 命令

shell

[ -x /usr/bin/pmset ] || exit 1
/usr/sbin/sysctl -n machdep.cpu.brand_string | /usr/bin/grep -q Intel || { echo 0; exit 0; }
/usr/bin/pmset -g custom | /usr/bin/awk '$1 == "powernap" && $2 == 1 {n++} END {print n+0}'

预期输出: 0

修复方式

修复方法: 操作指南或基础设施补丁

Terminal: sudo /usr/bin/pmset -a powernap 0. GUI: Desktop Instructions: System Settings > Energy Saver > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled. Laptop Instructions: System Settings > Battery > Power Adapter (for laptops only) > Set Power Nap to disabled > Battery > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled.

属性

操作系统: macos-15
标签: macossystem-settings
参考: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.10.2 Ensure Power Nap Is Disabled for Intel Macs

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target macos