Audit Lockdown Mode

低级别 2人工审核macos

说明

Apple introduced Lockdown Mode as a security feature in their 2022 OS releases that provides additional security protection Apple describes as extreme. Users and organizations that suspect some users are targets of advanced attacks must consider using this control. When lockdown mode is enabled, specific trusted websites can be excluded from Lockdown protection if necessary.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

GUI: System Settings > Privacy & Security > Verify Lockdown Mode is set to your organization's requirements. Terminal: sudo -u <username> /usr/bin/defaults read .GlobalPreferences.plist LDMGlobalEnabled 2>/dev/null When Lockdown mode has been enabled, it will return 1 and when disabled return 0. If

修复方式

修复方法: 操作指南或基础设施补丁

GUI: System Settings > Privacy & Security > Set Lockdown Mode to your organization's requirements.

属性

操作系统: macos-15
标签: macossystem-settings
参考: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.6.7 Audit Lockdown Mode