Detections
Analytics

1.92 APPL-14-002064

Information

The macOS system must enable Gatekeeper.

GROUP ID: V-259512RULE ID: SV-259512r1009593

Gatekeeper must be enabled.

Gatekeeper is a security feature that ensures applications are digitally signed by an Apple-issued certificate before they are permitted to run. Digital signatures allow the macOS host to verify that the application has not been modified by a malicious third party.

Administrator users will still have the option to override these settings on a case-by-case basis.

Solution

Configure the macOS system to enable gatekeeper with the following command:

/usr/sbin/spctl --global-enable

See Also

https://workbench.cisecurity.org/benchmarks/24070

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-5(3), CAT|I, CCI|CCI-001749, CCI|CCI-003992, Rule-ID|SV-259512r1009593_rule, STIG-ID|APPL-14-002064, Vuln-ID|V-259512

Plugin: Unix

Control ID: 2b584ece8e620677dfd17e0392071b87bba7a70a0ff4a1b8da12b763a3361fe2