Monterey - Disable the Built-in Web Server

Information

The built-in web server is a non-essential service built into macOS and _MUST_ be disabled.

NOTE: The built in web server service is disabled at startup by default macOS.

Solution

[source,bash]
----
/bin/launchctl disable system/org.apache.httpd
----

See Also

https://github.com/usnistgov/macos_security

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-3, 800-53|AC-17, 800-53|CM-7a., CCE|CCE-90932-5, CCI|CCI-000381

Plugin: Unix

Control ID: f1678e4f2ede428647c360fbe8730b9af96e5e56a8cfdd33dd308dd8e276fa14