TMAegisBeta
More rules for macos

macOS

TMA-MACOS-2.3.1.2

Ensure AirPlay Receiver Is Disabled

LowLevel 1Automatedmacos

Description

In macOS Monterey (12.0), Apple has added the capability to share content from another Apple device to the screen of a host Mac. While there are many valuable uses of this capability, such sharing on a standard Mac user workstation should be enabled ad hoc as required rather than allowing a continuous sharing service.

How it is checked

Audit method: Shell command

shell
/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowAirPlayIncomingRequests').js
EOS
Expected output
false

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.applicationaccess allowAirPlayIncomingRequests = <false/>.

Properties

Operating systems
macos-26
Tags
macossystem-settings
Reference
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.1.2 Ensure AirPlay Receiver Is Disabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell
tmaegis scan --target macos