Ensure AirDrop Is Disabled When Not Actively Transferring Files

中等級 1自動化macos

說明

AirDrop is Apple's built-in, on-demand, ad hoc file exchange system that is compatible with both macOS and iOS. It uses Bluetooth LE for discovery that limits connectivity to Mac or iOS users that are in close proximity. Depending on the setting, it allows everyone or only Contacts to share files when they are near each other. In many ways, this technology is far superior to the alternatives.

檢查方式

稽核方法: Shell 指令

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowAirDrop').js
EOS

預期輸出: false

修補方式

修補方法: 操作指南或基礎設施修補檔

Profile (preferred): com.apple.applicationaccess allowAirDrop = <false/>.

屬性

作業系統: macos-26
標籤: macossystem-settings
參考資料: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.1.1 Ensure AirDrop Is Disabled When Not Actively Transferring Files

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target macos