Ensure NFS Server Is Disabled

OrtaDüzey 1Otomatikmacos

Açıklama

macOS can act as an NFS fileserver. NFS sharing could be enabled to allow someone on another computer to mount shares and gain access to information from the user's computer. File sharing from a user endpoint has long been considered questionable, and Apple has removed that capability from the GUI.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

s=$(/sbin/nfsd status 2>/dev/null | /usr/bin/awk '/nfsd service/ { print $NF }') || exit 1
if [ "$s" = disabled ] && [ ! -e /etc/exports ]; then echo compliant; else echo "nfsd=${s:-unknown}; /etc/exports present or service enabled"; fi

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Terminal: sudo /bin/launchctl disable system/com.apple.nfsd ; sudo /bin/rm -rf /etc/exports.

Özellikler

İşletim sistemleri: macos-15
Etiketler: macosnetwork
Referans: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 4.3 Ensure NFS Server Is Disabled

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target macos