Detections
Analytics

Catalina - Disable Screen Sharing and Apple Remote Desktop

Information

Support for both Screen Sharing and Apple Remote Desktop (ARD) is non-essential and _MUST_ be disabled.

The information system _MUST_ be configured to provide only essential capabilities. Disabling screen sharing and ARD helps prevent the unauthorized connection of devices, the unauthorized transfer of information, and unauthorized tunneling.

Solution

[source,bash]
----
/bin/launchctl disable system/com.apple.screensharing
----
NOTE - This will apply to the whole system

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-3, 800-53|AC-17, 800-53|CM-6b., CCE|CCE-84842-4, CCI|CCI-000366, STIG-ID|AOSX-15-002050

Plugin: Unix

Control ID: 033b2ce4609dc1f58437f33ac031806ea74d69d5010503ea248f6db86d661859