Ensure Power Nap Is Disabled for Intel Macs

低等級 1自動化macos

說明

Power Nap allows the system to stay in low power mode, especially while on battery power, and periodically connect to previously known networks with stored credentials for user applications to phone home and get updates. This capability requires FileVault to remain unlocked and the use of previously joined networks to be risk accepted based on the SSID without user input. Audit: Intel Macs only; Apple silicon reports 0 (not applicable).

檢查方式

稽核方法: Shell 指令

shell

[ -x /usr/bin/pmset ] || exit 1
/usr/sbin/sysctl -n machdep.cpu.brand_string | /usr/bin/grep -q Intel || { echo 0; exit 0; }
/usr/bin/pmset -g custom | /usr/bin/awk '$1 == "powernap" && $2 == 1 {n++} END {print n+0}'

預期輸出: 0

修補方式

修補方法: 操作指南或基礎設施修補檔

Terminal: sudo /usr/bin/pmset -a powernap 0. GUI: Desktop Instructions: System Settings > Energy Saver > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled. Laptop Instructions: System Settings > Battery > Power Adapter (for laptops only) > Set Power Nap to disabled > Battery > Set Power Nap to disabled > UPS (if applicable) > Set Power Nap to disabled.

屬性

作業系統: macos-15
標籤: macossystem-settings
參考資料: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.10.2 Ensure Power Nap Is Disabled for Intel Macs

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target macos