Information
Allowing guests to connect to shared folders enables users to access selected shared folders and their contents from different computers on a network.
Rationale:
Not allowing guests to connect to shared folders mitigates the risk of an untrusted user doing basic reconnaissance and possibly use privilege escalation attacks to take control of the system.
Impact:
Unauthorized users could access shared files on the system.
Solution
Graphical Method:
Perform the following steps to no longer allow guest user access to shared folders:
Open System Settings
Select Users & Groups
Select the i next to the Guest User
Set Allow guests to connect to shared folders to disabled
Terminal Method:
Run the following commands to verify that shared folders are not accessible to guest users:
$ /usr/bin/sudo /usr/sbin/sysadminctl -smbGuestAccess off