Apple OS X 10-11 STIG Version Comparison

There are 2 differences between versions v1 r4 (April 28, 2017) (the "left" version) and v1 r6 (Jan. 26, 2018) (the "right" version).

Check AOSX-11-000606 was added to the benchmark in the "right" version.

This check's original form is available here.

Title

The OS X system must not use unencrypted FTP.

Check Content

To check if the "ftp" service is disabled, use the following command: /usr/bin/sudo /bin/launchctl print-disabled system | /usr/bin/grep com.apple.ftpd If the results do not show the following, this is a finding: "com.apple.ftpd" => true

Discussion

Fix

To disable the "ftp" service, run the following command: /usr/bin/sudo /bin/launchctl disable system/com.apple.ftpd The system may need to be restarted for the update to take effect.