Catalina - Disable Guest Access to Shared Apple File Protocol Folders

Information

Guest access to shared Apple File Protocol (AFP) folders _MUST_ be disabled.

Turning off guest access prevents anonymous users from accessing files shared via AFP.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.AppleFileServer:
guestAccess:
False

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

References: 800-53|AC-2, 800-53|AC-2(9), 800-53|IA-2, CCE|CCE-84760-8

Plugin: Unix

Control ID: f9677ccdfd37e56f14b517b198d23662f23b04ac7e0d32f4fc284747cfb13822