TMA-MACOS-2.3.3.5

Ensure Remote Management Is Disabled

YüksekDüzey 1Otomatikmacos

Açıklama

Remote Management is the client portion of Apple Remote Desktop (ARD). Remote Management can be used by remote administrators to view the current screen, install software, report on, and generally manage client Macs. The screen sharing options in Remote Management are identical to those in the Screen Sharing section. In fact, only one of the two can be configured. Audit: Passes when no ARDAgent process is running.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

[ -x /usr/bin/sw_vers ] || exit 1
out=$(/bin/ps -axo comm= 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c ARDAgent || true

Beklenen çıktı: 0

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Terminal: sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources /kickstart -deactivate -stop. GUI: System Settings > General > Sharing > Set Remote Management to disabled.

Özellikler

İşletim sistemleri: macos-26
Etiketler: macossystem-settings
Referans: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.5 Ensure Remote Management Is Disabled

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target macos