removed sysprefs_afp_disable

This commit is contained in:
Allen Golbig
2021-03-21 17:14:49 -04:00
parent 299e9133e6
commit 90ed20d91e
4 changed files with 0 additions and 44 deletions

View File

@@ -123,7 +123,6 @@ profile:
- sysprefs_screensaver_timeout_enforce
- sysprefs_firewall_enable
- sysprefs_find_my_disable
- sysprefs_afp_disable
- sysprefs_content_caching_disable
- sysprefs_location_services_disable
- sysprefs_time_server_configure

View File

@@ -100,7 +100,6 @@ profile:
- sysprefs_rae_disable
- sysprefs_firewall_enable
- sysprefs_find_my_disable
- sysprefs_afp_disable
- sysprefs_content_caching_disable
- sysprefs_location_services_disable
- sysprefs_diagnostics_reports_disable

View File

@@ -120,7 +120,6 @@ profile:
- sysprefs_screensaver_timeout_enforce
- sysprefs_firewall_enable
- sysprefs_find_my_disable
- sysprefs_afp_disable
- sysprefs_content_caching_disable
- sysprefs_location_services_disable
- sysprefs_time_server_configure

View File

@@ -1,41 +0,0 @@
id: sysprefs_afp_disable
title: "Disable Apple Filing Protocol Sharing"
discussion: |
If the system does not require Apple Filing Protocol (AFP) Sharing, support it is non-essential and _MUST_ be disabled.
The information system _MUST_ be configured to provide only essential capabilities. Disabling AFP helps prevent the unauthorized connection of devices and the unauthorized transfer of information.
check: |
/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.apple.AppleFileServer" => true'
result:
integer: 1
fix: |
[source,bash]
----
/bin/launchctl disable system/com.apple.AppleFileServer
----
The system may need to be restarted for the update to take effect.
references:
cce:
- CCE-85416-6
cci:
- CCI-000381
800-53r4:
- AC-3
srg:
- SRG-OS-000095-GPOS-00049
disa_stig:
- APPL-11-002002
800-171r2:
- 3.1.1
- 3.1.2
macOS:
- "11.0"
tags:
- 800-171
- cnssi-1253
- 800-53r4_low
- 800-53r4_moderate
- 800-53r4_high
mobileconfig: false
mobileconfig_info: