2.4.6 Disable DVD or CD Sharing

Information

DVD or CD Sharing allows users to remotely access the system's optical drive.

Rationale:

Disabling DVD or CD Sharing minimizes the risk of an attacker using the optical drive as a vector for attack and exposure of sensitive data.

Impact:

Many Apple devices are now sold without optical drives and drive sharing may be needed for legacy optical media.

Solution

Perform the following to disable DVD or CD sharing:
Graphical Method:

Open System Preferences

Select Sharing

Uncheck DVD or CD sharing

Terminal Method:
Run the following command to disable DVD or CD sharing:

$ sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.ODSAgent.plist

/System/Library/LaunchDaemons/com.apple.ODSAgent.plist: Operation now in progress

Note: If using the Terminal method, the GUI will still show the service checked until after a reboot.

See Also

https://workbench.cisecurity.org/files/3013

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|9.1

Plugin: Unix

Control ID: d7b02a4004158afc0279b19a70109560da4446a0a420a64eceb01cea72cb7a49