macOS
TMA-MACOS14-2.3.3.6
Ensure Remote Apple Events Is Disabled
Description
Apple Events is a technology that allows one program to communicate with other programs. Remote Apple Events allows a program on one computer to communicate with a program on a different computer. Disabling Remote Apple Events mitigates the risk of an unauthorized program gaining access to the system.
How it is checked
Audit method: Shell command
/usr/sbin/systemsetup -getremoteappleevents 2>/dev/null- Expected output
Remote Apple Events: Off
How it is fixed
Fix method: Guidance or infrastructure patch
Graphical Method: Perform the following steps to disable Remote Apple Events: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set Remote Apple Events to disabled Terminal Method: Run the following commands to set Remote Apple Events to Off: % /usr/bin/sudo /usr/sbin/systemsetup -setremoteappleevents off setremoteappleevents: Off
Properties
- Operating systems
- macos-14
- Tags
- macossonoma
- Reference
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.6 Ensure Remote Apple Events Is Disabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
tmaegis scan --target macos