Skip to content

The macOS system must only allow applications with a valid digital signature to run.

An XCCDF Rule

Description

Gatekeeper settings must be configured correctly to only allow the system to run applications signed with a valid Apple Developer ID code. Administrator users will still have the option to override these settings on a per-app basis. Gatekeeper is a security feature that ensures that applications must be digitally signed by an Apple-issued certificate to run. Digital signatures allow the macOS host to verify that the application has not been modified by a malicious third party.

ID
SV-257217r905284_rule
Version
APPL-13-002060
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure the macOS system to only allow applications with a valid digital signature by installing the "Restrictions Policy" configuration profile.