Ensure File Sharing Is Disabled

ВисокаНиво 1Аутоматскаmacos

Опис

File sharing from a user workstation creates additional risks, such as: - Open ports are created that can be probed and attacked - Passwords are attached to user accounts for access that may be exposed and endanger other parts of the organizational environment, including directory accounts - Increased complexity makes security more difficult and may expose additional attack vectors Apple's File Sharing uses the Server Message Block (SMB) protocol to share to other computers that can mount SMB shares. This includes other macOS computers. Apple warns that SMB sharing stored passwords is less secure, and anyone with system access can gain access to the password for that account. When sharing with SMB, each user accessing the Mac must have SMB enabled. Storing passwords, especially copies of valid directory passwords, decreases security for the directory account and should not be used. By...

Како се проверава

Метод провере: Команда љуске

shell

out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c 'com.apple.smbd' || true

Очекивани излаз: 0

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Graphical Method: Perform the following steps to disable File Sharing: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set File Sharing to disabled Terminal Method: Run the following command to disable File Sharing: % /usr/bin/sudo /bin/launchctl disable system/com.apple.smbd % /usr/bin/sudo /bin/launchctl bootout system/com.apple.smbd

Својства

Оперативни системи: macos-14
Ознаке: macossonoma
Референца: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.2 Ensure File Sharing Is Disabled

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target macos