1.4 Enable app update installs

Information

Ensure that application updates are installed after they are available from Apple. These updates do not require reboots or admin privileges for end users.

Rationale:

Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited

Impact:

Unpatched software may be exploited

Solution

Perform the following to enable App Store updates to install automatically:
Graphical Method:

Open System Preferences

Select Software Updates

Select Advanced

Select Install app updates from the App Store

Terminal Method:
Run the following command to turn on App Store auto updating:

$ sudo defaults write /Library/Preferences/com.apple.commerce AutoUpdate -bool TRUE

This remediation requires a log out and log in to show in the GUI.

See Also

https://workbench.cisecurity.org/files/3195

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(5), CSCv7|3.4, CSCv7|3.5

Plugin: Unix

Control ID: 85740cbce6b9f9b00fb20035994fc5bf9bdeefbc3d12d93b3c934ba767db99b4