2.4.1 Disable Remote Apple Events

Information

Apple Events is a technology that allows one program to communicate with other programs. Remote Apple Events allows a program on one computer to communicate with a program on a different computer.

Rationale:

Disabling Remote Apple Events mitigates the risk of an unauthorized program gaining access to the system.

Impact:

With remote Apple events turned on, an AppleScript program running on another Mac can interact with the local computer.

Solution

Perform the following to disable Remote Apple Events:
Graphical Method:

Open System Preferences

Select Sharing

Verify that Remote Apple Evens is not set

Terminal Method:
Run the following commands to set Remote Apple Events to Off:

$ sudo systemsetup -setremoteappleevents off

setremoteappleevents: Off

See Also

https://workbench.cisecurity.org/files/3195

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CSCv7|9.2

Plugin: Unix

Control ID: c459b8da1bebc573998e0c2a40f1b14a261fa36c52192c4f515d0ba0cf897fc2