Check: APPL-14-002250
Apple macOS 14 (Sonoma) STIG:
APPL-14-002250
(in versions v2 r2 through v1 r1)
Title
The macOS system must disable Remote Management. (Cat II impact)
Discussion
Remote Management must be disabled.
Check Content
Verify the macOS system is configured to disable Remote Management with the following command: /usr/libexec/mdmclient QuerySecurityInfo | /usr/bin/grep -c "RemoteDesktopEnabled = 0" If the result is not "1", this is a finding.
Fix Text
Configure the macOS system to disable Remote Management with the following commands: /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -stop
Additional Identifiers
Rule ID: SV-259533r958478_rule
Vulnerability ID: V-259533
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000381 |
Configure the system to provide only organization-defined mission essential capabilities. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-7 |
Least Functionality |