macOS
TMA-MACOS-2.3.1.2
Ensure AirPlay Receiver Is Disabled
LowLevel 1Automatedmacos
Description
In macOS Monterey (12.0), Apple has added the capability to share content from another Apple device to the screen of a host Mac. While there are many valuable uses of this capability, such sharing on a standard Mac user workstation should be enabled ad hoc as required rather than allowing a continuous sharing service.
How it is checked
Audit method: Shell command
shell
/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowAirPlayIncomingRequests').js
EOS- Expected output
false
How it is fixed
Fix method: Guidance or infrastructure patch
Profile (preferred): com.apple.applicationaccess allowAirPlayIncomingRequests = <false/>.
Properties
- Operating systems
- macos-26
- Tags
- macossystem-settings
- Reference
- CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.1.2 Ensure AirPlay Receiver Is Disabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target macos