macOS
TMA-MACOS14-2.3.4.1
Ensure Backup Automatically is Enabled If Time Machine Is Enabled
說明
Backup solutions are only effective if the backups run on a regular basis. The time to check for backups is before the hard drive fails or the computer goes missing. In order to simplify the user experience so that backups are more likely to occur, Time Machine should be on and set to Back Up Automatically whenever the target volume is available. Operational staff should ensure that backups complete on a regular basis and the backups are tested to ensure that file restoration from backup is possible when needed. Backup dates are available even when the target volume is not available in the Time Machine plist. SnapshotDates = ( "2020-08-20 12:10:22 +0000", "2021-02-03 23:43:22 +0000", "2022- 02-19 21:37:21 +0000", "2023-02-22 13:07:25 +0000", "2024-08-20 14:07:14 +0000" When the backup volume is connected to the computer, more extensive information is available through tmutil. See man...
檢查方式
稽核方法: Shell 指令
/usr/bin/osascript -l JavaScript <<'EOS'
function run() {
let pref1 = ObjC.unwrap($.NSUserDefaults.alloc.initWithSuiteName('com.apple.TimeMachine').objectForKey('AutoBackup'))
if ( pref1 == null || pref1 == 1 ) {
return("true")
} else {
return("false")
}
}
EOS- 預期輸出
true
修補方式
修補方法: 操作指南或基礎設施修補檔
Graphical Method: Perform the following steps to enable Time Machine automatic backup: 1. Open System Settings 2. Select General 3. Select Time Machine 4. Select Options... 5. Set Back up frequency to Automatically <every hour/every day/every week> Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.MCX.TimeMachine 2. The key to include is AutoBackup 3. The key must be set to <true/> Note: In previous versions of the benchmark, the plist could be set in Terminal. In macOS 15 Sequoia that plist is now protected and cannot be written to, so the command line remediation has been removed. Both the profile method and graphical method still configure Time Machine to the required state.
屬性
- 作業系統
- macos-14
- 標籤
- backupmacossonoma
- 參考資料
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.4.1 Ensure Backup Automatically is Enabled If Time Machine Is Enabled
檢查此主機
請在您有權稽核的機器上執行此指令。掃描為唯讀操作。
tmaegis scan --target macos --level 2