Detections
Analytics

Catalina - Disable the Built-in Web Server

Information

The built-in web server is a non-essential service built into macOS and _MUST_ be disabled.

NOTE: The built in web server service is disabled at startup by default macOS.

Solution

[source,bash]
----
/bin/launchctl disable system/org.apache.httpd
----

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-3, 800-53|AC-17, 800-53|CM-7a., CCE|CCE-84765-7, CCI|CCI-000381, STIG-ID|AOSX-15-002008

Plugin: Unix

Control ID: 2df3c07856ef31b4381c83843f90caa0af3937d2e2d8c821fd127bbb6c1ec7e7