usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-17 06:12:10 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

fix[rule]: Fixed system_settings_ssh_disable

Browse Source 
Fixed logic for system_settings_ssh_disable and added note.
This commit is contained in:
Allen Golbig
2022-09-29 12:56:00 -04:00
parent d334ce846a
commit aea1451373
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/system_settings/system_settings_rae_disable.yaml
View File

@@ -14,7 +14,7 @@ fix: |
/usr/sbin/systemsetup -setremoteappleevents off
/bin/launchctl disable system/com.apple.AEServer
----
NOTE: Systemsetup with -setremoteappleevents flag will fail unless you grant Full Disk Access to systemsetup or it's parent process. Requires UAMDM.
NOTE: Systemsetup with -setremoteappleevents flag will fail unless you grant Full Disk Access to systemsetup or it's parent process. Requires supervision.
references:
cce:
- CCE-91970-4

2
rules/system_settings/system_settings_ssh_disable.yaml
View File

@@ -11,8 +11,10 @@ result:
fix: |
[source,bash]
----
/usr/sbin/systemsetup -f -setremotelogin off
/bin/launchctl disable system/com.openssh.sshd
----
NOTE: Systemsetup with -setremotelogin flag will fail unless you grant Full Disk Access to systemsetup or it's parent process. Requires supervision.
references:
cce:
- CCE-91984-5