Check: OSX8-00-01270
Apple OSX 10.8 STIG:
OSX8-00-01270
(in version v1 r2)
Title
Internet Sharing must be disabled. (Cat II impact)
Discussion
Internet Sharing must be disabled.
Check Content
To check if Internet sharing is disabled, run the following command: sudo /usr/libexec/PlistBuddy -c "print com.apple.InternetSharing:Disabled" /var/db/launchd.db/com.apple.launchd/overrides.plist If the returned value isn't "true" or doesn't exist, this is a finding.
Fix Text
To disable Internet Sharing, run the following command: sudo defaults write /private/var/db/launchd.db/com.apple.launchd/overrides.plist "com.apple.InternetSharing" -dict Disabled -bool true
Additional Identifiers
Rule ID: SV-65623r1_rule
Vulnerability ID: V-51413
Group Title:
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001414 |
The information system enforces approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies. |
Controls
Number | Title |
---|---|
AC-4 |
Information Flow Enforcement |