Ensure Remote Apple Events Is Disabled

HighLevel 1Automatedmacos

Description

Apple Events is a technology that allows one program to communicate with other programs. Remote Apple Events allows a program on one computer to communicate with a program on a different computer.

How it is checked

Audit method: Shell command

shell

/usr/sbin/systemsetup -getremoteappleevents 2>/dev/null

Expected output: Remote Apple Events: Off

How it is fixed

Fix method: Guidance or infrastructure patch

Terminal: sudo /usr/sbin/systemsetup -setremoteappleevents off. GUI: System Settings > General > Sharing > Set Remote Apple Events to disabled.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.6 Ensure Remote Apple Events Is Disabled

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target macos