Details

Ensure that application updates are installed after they are available from Apple. These updates do not require reboots or admin privileges for end users.

Rationale:

Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited.

Impact:

Unpatched software may be exploited.

Solution

Perform the following to enable App Store updates to install automatically:
Graphical Method:

Open System Preferences

Select Software Updates

Select Advanced

Select Install app updates from the App Store

Terminal Method:
Run the following command to turn on App Store auto updating:

$ sudo defaults write /Library/Preferences/com.apple.commerce AutoUpdate -bool TRUE

This remediation requires a log out and log in to show in the GUI.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3423

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-2
• CSCv7|3.4
• CSCv7|3.5

Source

• Tenable.com/audits