2.5.2 Enable Gatekeeper

Information

Gatekeeper is Apple's application white-listing control that restricts downloaded applications from launching. It functions as a control to limit applications from unverified sources from running without authorization.

Rationale:

Disallowing unsigned software will reduce the risk of unauthorized or malicious applications from running on the system.

Solution

Perform the following to implement the prescribed state:
Graphical Method:

Open System Preferences

Select Security & Privacy

Select General

Set Allow apps downloaded from to Mac App Store and identified developers

Terminal Method:
Run the following command to enable Gatekeeper to allow applications from App Store and identified developers:

$ sudo spctl --master-enable

See Also

https://workbench.cisecurity.org/files/3013

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(4)

Plugin: Unix

Control ID: 93c2a20084ed4cd4348bd9f312579230b680839fa86d12cd305d408785f6e1d4