2.4.2 Disable Internet Sharing

Information

Internet Sharing uses the open source natd process to share an internet connection with other computers and devices on a local network. This allows the Mac to function as a router and share the connection to other, possibly unauthorized, devices. Disabling Internet Sharing reduces the remote attack surface of the system.

Solution

Perform the following to implement the prescribed state: Open System Preferences Select Sharing Uncheck Internet Sharing Impact: Internet sharing allows the computer to function as a router and other computers to use it for access. This can expose both the computer itself and the networks it is accessing to unacceptable access from unapproved devices.

See Also

https://workbench.cisecurity.org/files/299

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Unix

Control ID: 639ff2c0d2a8d48e31030925aef3ceb24275d824bc71f3fa1eca5dd876b6a68f