The macOS system must disable Bonjour multicast.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-277088 | SRG-OS-000095-GPOS-00049 | APPL-26-002005 | SV-277088r1148716_rule | 2026-02-11 | 1 |
Description
Bonjour multicast advertising must be disabled to prevent the system from broadcasting its presence and available services over network interfaces.
ℹ️ Check
Verify the macOS system is configured to disable Bonjour multicast with the following command:
/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.mDNSResponder')\
.objectForKey('NoMulticastAdvertisements').js
EOS
If the result is not "true", this is a finding.
✔️ Fix
Configure the macOS system to disable Bonjour multicast by installing the "com.apple.mDNSResponder" configuration profile.