2.6.2 Enable Gatekeeper

Information

Disallowing unsigned software will reduce the risk of unauthorized or malicious applications from running on the system.

Solution

Perform the following to implement the prescribed state:
1. Open System Preferences
2. Select Security & Privacy
3. Select General
4. Select Allow applications downloaded from: Mac App Store and identified developers
Alternatively, perform the following to ensure the system is configured as:
1. Run the following command in Terminal:
sudo spctl --master-enable

See Also

https://workbench.cisecurity.org/files/301

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7(4)

Plugin: Unix

Control ID: bc632c630f894a61caa4ddf393e3cfb30b65d587191fc0f55a79df8f4c453652