1.4 Enable system data files and security update installs - 'CriticalUpdateInstall'

Information

Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited

Solution

Perform the following to implement the prescribed state:
1. Open a terminal session and enter the following command to enable install system data files and security updates:
sudo /usr/bin/defaults write /Library/Preferences/com.apple.SoftwareUpdate CriticalUpdateInstall -int 1

See Also

https://workbench.cisecurity.org/files/300

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(5)

Plugin: Unix

Control ID: d6ba63c99cac57ebd8215909037f3bf4738b2051d6e1e97bd34acd30d7bccdeb