UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The macOS system must enable SSH server for remote access sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-259442 APPL-14-000080 SV-259442r986255_rule Medium
Description
Remote access sessions must use encrypted methods to protect unauthorized individuals from gaining access. Satisfies: SRG-OS-000080-GPOS-00048,SRG-OS-000113-GPOS-00058,SRG-OS-000425-GPOS-00189,SRG-OS-000426-GPOS-00190
STIG Date
Apple macOS 14 (Sonoma) Security Technical Implementation Guide 2024-05-30

Details

Check Text ( C-63181r940946_chk )
Verify the macOS system is configured to enable SSH server for remote access sessions with the following command:

/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.openssh.sshd" => enabled'

If the result is not "1", this is a finding.
Fix Text (F-63089r940947_fix)
Configure the macOS system to enable SSH server for remote access sessions with the following command:

/bin/launchctl enable system/com.openssh.sshd