Files
macos_security/rules/sysprefs/sysprefs_screen_sharing_disable.yaml
2020-09-10 17:28:46 -04:00

42 lines
1.1 KiB
YAML

id: sysprefs_screen_sharing_disable
title: "Disable Screen Sharing and Apple Remote Desktop"
discussion: |
Support for both Screen Sharing and Apple Remote Desktop (ARD) is non-essential and _MUST_ be disabled.
The information system _MUST_ be configured to provide only essential capabilities. Disabling screen sharing and ARD helps prevent the unauthorized connection of devices, the unauthorized transfer of information, and unauthorized tunneling.
check: |
/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.apple.screensharing" => true'
result:
integer: 1
fix: |
[source,bash]
----
/bin/launchctl disable system/com.apple.screensharing
----
NOTE - This will apply to the whole system
references:
cce:
- CCE-84842-4
cci:
- CCI-000366
800-53r4:
- AC-3
- AC-17
srg:
- SRG-OS-000480-GPOS-00227
disa_stig:
- AOSX-14-002050
800-171r2:
- 3.1.1
- 3.1.2
macOS:
- "10.15"
tags:
- 800-171
- cnssi-1253
- fisma-low
- fisma-moderate
- fisma-high
- STIG
mobileconfig: false
mobileconfig_info: