Detections
Analytics

Catalina - Disable Apple Filing Protocol Sharing

Information

If the system does not require Apple Filing Protocol (AFP) Sharing, support it is non-essential and _MUST_ be disabled.

The information system _MUST_ be configured to provide only essential capabilities. Disabling AFP helps prevent the unauthorized connection of devices and the unauthorized transfer of information.

Solution

[source,bash]
----
/bin/launchctl disable system/com.apple.AppleFileServer
----
The system may need to be restarted for the update to take effect.

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-3, 800-53|AC-17, 800-53|CM-7a., CCE|CCE-84823-4, CCI|CCI-000381, STIG-ID|AOSX-15-002002

Plugin: Unix

Control ID: b74bf9cd3ab84d8806506b52795f8f5bfb82f854616bb83ed53127df94088fb7