TMAegisBeta
Thêm quy tắc cho macos

macOS

TMA-MACOS14-2.3.3.7

Ensure Internet Sharing Is Disabled

CaoCấp 1Tự độngmacos

Mô tả

Internet Sharing uses the open source natd process to share an internet connection with other computers and devices on a local network. This allows the Mac to function as a router and share the connection to other, possibly unauthorized, devices. Disabling Internet Sharing reduces the remote attack surface of the system.

Cách kiểm tra

Phương pháp kiểm tra: Lệnh shell

shell
[ -x /usr/bin/defaults ] || exit 1
f=$(/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.MCX').objectForKey('forceInternetSharingOff').js
EOS
)
n=$(/usr/bin/defaults read /Library/Preferences/SystemConfiguration/com.apple.nat 2>/dev/null | /usr/bin/grep -c "Enabled = 1;")
if [ "$f" = true ] || [ "${n:-0}" -eq 0 ]; then echo compliant; else echo "Internet Sharing enabled"; fi
Đầu ra mong đợi
compliant

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Graphical Method: Perform the following steps to disable Internet Sharing: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set Internet Sharing to disabled Terminal Method: Run the following command to turn off Internet Sharing: % usr/bin/sudo /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.nat NAT -dict Enabled -int 0 Note: Using the Terminal Method will not be reflected in the GUI, but will disable the underlying service. Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.MCX 2. The key to include is forceInternetSharingOff 3. The key must be set to <true/>

Thuộc tính

Hệ điều hành
macos-14
Thẻ
macossonoma
Tham chiếu
CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.7 Ensure Internet Sharing Is Disabled

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell
tmaegis scan --target macos