Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-252479 | APPL-12-002001 | SV-252479r816251_rule | Medium |
Description |
---|
File Sharing is usually non-essential and must be disabled if not required. Enabling any service increases the attack surface for an intruder. By disabling unnecessary services, the attack surface is minimized. |
STIG | Date |
---|---|
Apple macOS 12 (Monterey) Security Technical Implementation Guide | 2023-08-28 |
Check Text ( C-55935r816249_chk ) |
---|
If SMB File Sharing is required, this is not applicable. To check if the SMB File Sharing service is disabled, use the following command: /bin/launchctl print-disabled system | /usr/bin/grep com.apple.smbd If the results do not show the following, this is a finding: "com.apple.smbd" => true |
Fix Text (F-55885r816250_fix) |
---|
To disable the SMB File Sharing service, run the following command: /usr/bin/sudo /bin/launchctl disable system/com.apple.smbd The system may need to be restarted for the update to take effect. |