1.4 Enable app update installs

Information

Ensure that application updates are installed after they are available from Apple. These updates do not require reboots or admin privileges for end users.

Rationale:

Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited

Impact:

Unpatched software may be exploited

Solution

Perform the following to enable App Store updates to install automatically:
Graphical Method:

Open System Preferences

Select Software Updates

Select Advanced

Select Install app updates from the App Store

Terminal Method:
Run the following command to turn on App Store auto updating:

$ sudo defaults write /Library/Preferences/com.apple.commerce AutoUpdate -bool TRUE

This remediation requires a log out and log in to show in the GUI.

See Also

https://workbench.cisecurity.org/files/3197

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(5), CSCv7|3.4, CSCv7|3.5

Plugin: Unix

Control ID: 1d18c3772dcc8a1605db8566adadc593d26893004b8d80bcf869c7fe5e9cd632