Ensure Remote Apple Events Is Disabled

高级别 1自动化macos

说明

Apple Events is a technology that allows one program to communicate with other programs. Remote Apple Events allows a program on one computer to communicate with a program on a different computer. Disabling Remote Apple Events mitigates the risk of an unauthorized program gaining access to the system.

检查方式

审计方法: Shell 命令

shell

/usr/sbin/systemsetup -getremoteappleevents 2>/dev/null

预期输出: Remote Apple Events: Off

修复方式

修复方法: 操作指南或基础设施补丁

Graphical Method: Perform the following steps to disable Remote Apple Events: 1. Open System Settings 2. Select General 3. Select Sharing 4. Set Remote Apple Events to disabled Terminal Method: Run the following commands to set Remote Apple Events to Off: % /usr/bin/sudo /usr/sbin/systemsetup -setremoteappleevents off setremoteappleevents: Off

属性

操作系统: macos-14
标签: macossonoma
参考: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.6 Ensure Remote Apple Events Is Disabled

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target macos