Ensure HTTP Server Is Disabled

MediaNivel 1Automatizadamacos

Descripción

macOS used to have a graphical front-end to the embedded Apache web server in the operating system. Personal web sharing could be enabled to allow someone on another computer to download files or information from the user's computer. Personal web sharing from a user endpoint has long been considered questionable, and Apple has removed that capability from the GUI.

Cómo se verifica

Método de auditoría: Comando de shell

shell

out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c 'org.apache.httpd' || true

Salida esperada: 0

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Terminal: sudo /usr/sbin/apachectl stop ; sudo /bin/launchctl unload -w /System/Library/LaunchDaemons/org.apache.httpd.plist.

Propiedades

Sistemas operativos: macos-26
Etiquetas: macosnetwork
Referencia: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 4.2 Ensure HTTP Server Is Disabled

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target macos