Monterey - Disable Server Message Block Sharing

Information

Support for Server Message Block (SMB) file sharing is non-essential and _MUST_ be disabled.

The information system _MUST_ be configured to provide only essential capabilities.

Solution

[source,bash]
----
/bin/launchctl disable system/com.apple.smbd
----
The system may need to be restarted for the update to take effect.

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-3, 800-53|AC-17, 800-53|CM-7a., CCE|CCE-91076-0, CCI|CCI-000381

Plugin: Unix

Control ID: 17171af97e46d117b17cb1c601a07348f4535371c5782a0dc86ffb4d941cff37