mirror of
https://github.com/usnistgov/macos_security.git
synced 2026-03-05 01:23:18 +00:00
removed sysprefs_afp_disable
This commit is contained in:
@@ -123,7 +123,6 @@ profile:
|
||||
- sysprefs_screensaver_timeout_enforce
|
||||
- sysprefs_firewall_enable
|
||||
- sysprefs_find_my_disable
|
||||
- sysprefs_afp_disable
|
||||
- sysprefs_content_caching_disable
|
||||
- sysprefs_location_services_disable
|
||||
- sysprefs_time_server_configure
|
||||
|
||||
@@ -100,7 +100,6 @@ profile:
|
||||
- sysprefs_rae_disable
|
||||
- sysprefs_firewall_enable
|
||||
- sysprefs_find_my_disable
|
||||
- sysprefs_afp_disable
|
||||
- sysprefs_content_caching_disable
|
||||
- sysprefs_location_services_disable
|
||||
- sysprefs_diagnostics_reports_disable
|
||||
|
||||
@@ -120,7 +120,6 @@ profile:
|
||||
- sysprefs_screensaver_timeout_enforce
|
||||
- sysprefs_firewall_enable
|
||||
- sysprefs_find_my_disable
|
||||
- sysprefs_afp_disable
|
||||
- sysprefs_content_caching_disable
|
||||
- sysprefs_location_services_disable
|
||||
- sysprefs_time_server_configure
|
||||
|
||||
@@ -1,41 +0,0 @@
|
||||
id: sysprefs_afp_disable
|
||||
title: "Disable Apple Filing Protocol Sharing"
|
||||
discussion: |
|
||||
If the system does not require Apple Filing Protocol (AFP) Sharing, support it is non-essential and _MUST_ be disabled.
|
||||
|
||||
The information system _MUST_ be configured to provide only essential capabilities. Disabling AFP helps prevent the unauthorized connection of devices and the unauthorized transfer of information.
|
||||
check: |
|
||||
/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.apple.AppleFileServer" => true'
|
||||
result:
|
||||
integer: 1
|
||||
fix: |
|
||||
[source,bash]
|
||||
----
|
||||
/bin/launchctl disable system/com.apple.AppleFileServer
|
||||
----
|
||||
The system may need to be restarted for the update to take effect.
|
||||
references:
|
||||
cce:
|
||||
- CCE-85416-6
|
||||
cci:
|
||||
- CCI-000381
|
||||
800-53r4:
|
||||
- AC-3
|
||||
srg:
|
||||
- SRG-OS-000095-GPOS-00049
|
||||
disa_stig:
|
||||
- APPL-11-002002
|
||||
800-171r2:
|
||||
- 3.1.1
|
||||
- 3.1.2
|
||||
macOS:
|
||||
- "11.0"
|
||||
tags:
|
||||
- 800-171
|
||||
- cnssi-1253
|
||||
- 800-53r4_low
|
||||
- 800-53r4_moderate
|
||||
- 800-53r4_high
|
||||
|
||||
mobileconfig: false
|
||||
mobileconfig_info:
|
||||
Reference in New Issue
Block a user