Ensure Remote Management Is Disabled

高级别 1自动化macos

说明

Remote Management is the client portion of Apple Remote Desktop (ARD). Remote Management can be used by remote administrators to view the current screen, install software, report on, and generally manage client Macs. The screen sharing options in Remote Management are identical to those in the Screen Sharing section. In fact, only one of the two can be configured. Audit: Passes when no ARDAgent process is running.

检查方式

审计方法: Shell 命令

shell

[ -x /usr/bin/sw_vers ] || exit 1
out=$(/bin/ps -axo comm= 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c ARDAgent || true

预期输出: 0

修复方式

修复方法: 操作指南或基础设施补丁

Terminal: sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources /kickstart -deactivate -stop. GUI: System Settings > General > Sharing > Set Remote Management to disabled.

属性

操作系统: macos-15
标签: macossystem-settings
参考: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.3.5 Ensure Remote Management Is Disabled

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target macos