Ensure NFS Server Is Disabled

SrednjaNivo 1Automatskamacos

Opis

macOS can act as an NFS fileserver. NFS sharing could be enabled to allow someone on another computer to mount shares and gain access to information from the user's computer. File sharing from a user endpoint has long been considered questionable, and Apple has removed that capability from the GUI.

Kako se proverava

Metod provere: Komanda ljuske

shell

s=$(/sbin/nfsd status 2>/dev/null | /usr/bin/awk '/nfsd service/ { print $NF }') || exit 1
if [ "$s" = disabled ] && [ ! -e /etc/exports ]; then echo compliant; else echo "nfsd=${s:-unknown}; /etc/exports present or service enabled"; fi

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Terminal: sudo /bin/launchctl disable system/com.apple.nfsd ; sudo /bin/rm -rf /etc/exports.

Svojstva

Operativni sistemi: macos-15
Oznake: macosnetwork
Referenca: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 4.3 Ensure NFS Server Is Disabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target macos