TMA-MACOS-2.3.3.1
Ensure Screen Sharing Is Disabled
HighLevel 1Automatedmacos
Description
Screen Sharing allows a computer to connect to another computer on a network and display the computer’s screen. While sharing the computer’s screen, the user can control what happens on that computer, such as opening documents or applications, opening, moving, or closing windows, and even shutting down the computer.
How it is checked
Audit method: Shell command
shell
out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -cE 'com.apple.screensharing$' || true- Expected output
0
How it is fixed
Fix method: Guidance or infrastructure patch
Terminal: sudo /bin/launchctl disable system/com.apple.screensharing ; sudo /bin/launchctl bootout system/com.apple.screensharing. GUI: System Settings > General > Sharing > Set Screen Sharing to disabled.
Properties
- Operating systems
- macos-26
- Tags
- macossystem-settings
- Reference
- CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.1 Ensure Screen Sharing Is Disabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target macos