UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Web Sharing must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-67739 AOSX-11-001275 SV-82229r1_rule Medium
Description
Web Sharing is non-essential and must be disabled. Enabling any service increases the attack surface for an intruder. By disabling unnecessary services, the attack surface is minimized.
STIG Date
Apple OS X 10.11 Security Technical Implementation Guide 2017-07-11

Details

Check Text ( C-68305r1_chk )
To check if the "Web Sharing" service is disabled, use the following command:

/usr/bin/sudo /bin/launchctl print-disabled system | /usr/bin/grep org.apache.httpd

If the results do not show the following, this is a finding.

"org.apache.httpd" => true
Fix Text (F-73853r1_fix)
To disable the "Web Sharing" service, run the following command:

/usr/bin/sudo /bin/launchctl disable system/org.apache.httpd

The system may need to be restarted for the update to take effect.