TMAegis
Više pravila za macos

TMA-MACOS-2.13.2

Ensure Guest Access to Shared Folders Is Disabled

VisokaNivo 1Automatskamacos

Opis

Allowing guests to connect to shared folders enables users to access selected shared folders and their contents from different computers on a network.

Kako se proverava

Metod provere: Komanda ljuske

shell
out=$(/usr/sbin/sysadminctl -smbGuestAccess status 2>&1) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -q "SMB guest access disabled" && echo compliant
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Terminal: sudo /usr/sbin/sysadminctl -smbGuestAccess off. GUI: System Settings > Users & Groups > i next to the Guest User > Set Allow guests to connect to shared folders to disabled.

Svojstva

Operativni sistemi
macos-26
Oznake
macossystem-settings
Referenca
CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.13.2 Ensure Guest Access to Shared Folders Is Disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target macos