Detections
Analytics

Big Sur - Disable the Built-in Web Server

Information

The built-in web server is a non-essential service built into macOS and _MUST_ be disabled.

NOTE: The built in web server service is disabled at startup by default macOS.

Solution

[source,bash]
----
/bin/launchctl disable system/org.apache.httpd
----

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-3, 800-53|AC-17, 800-53|CM-7a., CCE|CCE-85323-4, CCI|CCI-000381, STIG-ID|APPL-11-002008

Plugin: Unix

Control ID: 4e3a443ea683e06cd9af19b69e324a87934c359f00301232a82a9f008d985f97