2.4.3 Ensure Screen Sharing Is Disabled

Information

Screen Sharing allows a computer to connect to another computer on a network and display the computer's screen. While sharing the computer's screen, the user can control what happens on that computer, such as opening documents or applications, opening, moving, or closing windows, and even shutting down the computer.

Rationale:

Disabling Screen Sharing mitigates the risk of remote connections being made without the user of the console knowing that they are sharing the computer.

Solution

Perform the following to disable Screen Sharing:
Graphical Method:

Open System Preferences

Select Sharing

Uncheck Screen Sharing

Terminal Method:
Run the following command to turn off Screen Sharing:

$ sudo launchctl disable system/com.apple.screensharing

See Also

https://workbench.cisecurity.org/files/3569

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

References: 800-53|CM-1, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SA-3, 800-53|SA-8, 800-53|SA-10, CSCv7|5.1, CSCv7|9.2

Plugin: Unix

Control ID: 2f3f54298473e9d8ee1a8753a89bb840a474f3cdbaa36d3fc6d9a9764b7202c6