The macOS system must disable Network File System service.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-259479 | SRG-OS-000080-GPOS-00048 | APPL-14-002003 | SV-259479r958472_rule | 2024-12-04 | 2 |
Description
Support for Network File Systems (NFS) services is nonessential and, therefore, must be disabled.
ℹ️ Check
Verify the macOS system is configured to disable network file system service with the following command:
/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.apple.nfsd" => disabled'
If the result is not "1", this is a finding.
✔️ Fix
Configure the macOS system to disable network file system service with the following command:
/bin/launchctl disable system/com.apple.nfsd
The system may need to be restarted for the update to take effect.