Detections
Analytics

Catalina - Disable Internet Sharing

Information

If the system does not require Internet sharing, support for it is non-essential and _MUST_ be disabled.

The information system _MUST_ be configured to provide only essential capabilities. Disabling Internet sharing helps prevent the unauthorized connection of devices, unauthorized transfer of information, and unauthorized tunneling.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.MCX:
 forceInternetSharingOff:
 True

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-4, 800-53|AC-20, 800-53|CM-7a., CCE|CCE-84837-4, CCI|CCI-000381, STIG-ID|AOSX-15-002007

Plugin: Unix

Control ID: 754f9413b452b191207e379c3a29a79a59741b7662eaa8548dcfd3d80025c352