1.4 Enable system data files and security update installs - 'CriticalUpdateInstall'

Information

Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited

Solution

Perform the following to implement the prescribed state:
1. Open a terminal session and enter the following command to enable install system data files and security updates:
sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CriticalUpdateInstall -bool true

See Also

https://workbench.cisecurity.org/files/301

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-2(5)

Plugin: Unix

Control ID: f3437896dc554a4710b5d188b69ab8bff7a7bd79e324e7611ce0be4af9f731c3