Detections
Analytics
APPL-26-002050 - The macOS system must disable Screen Sharing and Apple Remote Desktop.
Information
Support for both Screen Sharing and Apple Remote Desktop is nonessential and must be disabled.The information system must be configured to provide only essential capabilities. Disabling Screen Sharing and Apple Remote Desktop helps prevent unauthorized connection of devices, transfer of information, and tunneling.
Solution
Configure the macOS system to disable Screen Sharing and Apple Remote Desktop with the following command:/bin/launchctl bootout system/com.apple.screensharing
/bin/launchctl disable system/com.apple.screensharing
Note: This will apply to the whole system.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_macOS_26_V1R4_STIG.zip
Item Details
Audit Name: DISA Apple macOS 26 Tahoe STIG v1r4
Category: ACCESS CONTROL
References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-277114r1268226_rule, STIG-ID|APPL-26-002050, Vuln-ID|V-277114
Plugin: Unix
Control ID: ede9c1a4132a5fefb838c2d357d85107df021b9f158e69e5e244ca642944ccb9