Ensure AirPlay Receiver Is Disabled

DüşükDüzey 1Otomatikmacos

Açıklama

In macOS Monterey (12.0), Apple has added the capability to share content from another Apple device to the screen of a host Mac. While there are many valuable uses of this capability, such sharing on a standard Mac user workstation should be enabled ad hoc as required rather than allowing a continuous sharing service. The feature can be restricted by Apple Account or network and is configured to use by accepting the connection on the Mac. Part of the concern is frequent connection requests may function as a denial-of-service and access control limits may provide too much information to an attacker. https://macmost.com/how-to-use-a-mac-as-an-airplay-receiver.html https://support.apple.com/guide/mac-pro-rack/use-airplay-apdf1417128d/mac This capability appears very useful for kiosk and shared work spaces. The ability to allow by network could be especially useful on segregated guest net...

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('allowAirPlayIncomingRequests').js
EOS

Beklenen çıktı: false

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is allowAirPlayIncomingRequests 3. The key must be set to <false/>

Özellikler

İşletim sistemleri: macos-14
Etiketler: macossonoma
Referans: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.1.2 Ensure AirPlay Receiver Is Disabled

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target macos