Detections
Analytics

6.3.10 Ensure Show Status Bar Is Enabled

Information

The Status Bar in Safari shows the full URL of any link on hover. It protects the user from visiting sites where the domain has been obfuscated by allowing the user to review whether the link points to an unexpected location.

Showing the Status Bar allows the user to review the full URL of hyperlinks.

Solution

Profile Method:

Create or edit a configuration profile with the following information:

 - The PayloadType string is com.apple.Safari
 - The key to include is ShowOverlayStatusBar
 - The key must be set to: <true/>

Impact:

The Status Bar is only visible at the very bottom of the Web page when a hyperlink is hovered over. There should be no noticeable impact.

See Also

https://workbench.cisecurity.org/benchmarks/23042

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-10, 800-53|SC-18, CSCv7|7.1

Plugin: Unix

Control ID: 76d7b0ba935fe49ae669db6a8e8166b83f958e1ed1bb1b87468026ccca29be52