Detections
Analytics

1.3 Enable app update installs

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Ensure that application updates are installed after they are available from Apple. These updates do not require reboots or admin privileges for end users.

Rationale:

Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited

Solution

Perform the following to implement the prescribed state:

1. Open a terminal session and enter the following command to enable the auto update feature:

sudo defaults write /Library/Preferences/com.apple.commerce AutoUpdate -bool TRUE

The remediation requires a log out and log in to show in the GUI. Please note that.

See Also

https://workbench.cisecurity.org/files/2105

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(5)

Plugin: Unix

Control ID: a32f1cd68201348c4be18bb200c24f6cd3030f9b3d9f9390f4c2b1e486f99151