BaselineWatch
Desk

system_settings_software_update_enforce Enforce Software Update Automatically

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Enforce Software Update Automatically

Control

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.SoftwareUpdate')\
.objectForKey('AutomaticCheckEnabled').js
EOS

Discussion

Software Update _MUST_ be configured to enforce automatic update is enabled.

Related controls

si-2.5

Fix

This is implemented by a Configuration Profile.