Skip to content

The macOS system must allow only applications that have a valid digital signature to run.

An XCCDF Rule

Description

Gatekeeper settings must be configured correctly to only allow the system to run applications signed with a valid Apple Developer ID code. Administrator users will still have the option to override these settings on a per-app basis. Gatekeeper is a security feature that ensures that applications must be digitally signed by an Apple-issued certificate in order to run. Digital signatures allow the macOS host to verify that the application has not been modified by a malicious third party.

ID
SV-252511r816347_rule
Version
APPL-12-002060
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

This setting is enforced using the "Restrictions Policy" configuration profile.