Detections
Analytics

2.6.2 Enable Gatekeeper

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Gatekeeper is Apple's application white-listing control that restricts downloaded applications from launching. It functions as a control to limit applications from unverified sources from running without authorization.

Rationale:

Disallowing unsigned software will reduce the risk of unauthorized or malicious applications from running on the system.

Solution

Perform the following to implement the prescribed state:

1. Open System Preferences
2. Select Security & Privacy
3. Select General
4. Select Allow applications downloaded from: Mac App Store and identified developers

Alternatively, perform the following to ensure the system is configured as:

1. Run the following command in Terminal:

sudo spctl --master-enable

See Also

https://workbench.cisecurity.org/files/2105

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(4)

Plugin: Unix

Control ID: 667dadfa3b78b68ca6369829663ca7cd42015507c2171ef8b9040f4dce4c80dc