Ensure Screen Sharing Is Disabled

高等級 1自動化macos

說明

Screen Sharing allows a computer to connect to another computer on a network and display the computer’s screen. While sharing the computer’s screen, the user can control what happens on that computer, such as opening documents or applications, opening, moving, or closing windows, and even shutting down the computer.

檢查方式

稽核方法: Shell 指令

shell

out=$(/bin/launchctl list 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -cE 'com.apple.screensharing$' || true

預期輸出: 0

修補方式

修補方法: 操作指南或基礎設施修補檔

Terminal: sudo /bin/launchctl disable system/com.apple.screensharing ; sudo /bin/launchctl bootout system/com.apple.screensharing. GUI: System Settings > General > Sharing > Set Screen Sharing to disabled.

屬性

作業系統: macos-15
標籤: macossystem-settings
參考資料: CIS Apple macOS 15.0 Sequoia Benchmark v2.1.0 - 2.3.3.1 Ensure Screen Sharing Is Disabled

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target macos