Details

Media sharing _MUST_ be disabled.

When Media Sharing is enabled, the computer starts a network listening service that shares the contents of the user’s music collection with other users in the same subnet.

The information system _MUST_ be configured to provide only essential capabilities. Disabling Media Sharing helps prevent the unauthorized connection of devices and the unauthorized transfer of information. Disabling Media Sharing mitigates this risk.

NOTE: The Media Sharing preference panel will still allow “Home Sharing” and “Share media with guests” to be checked but the service will not be enabled.

Solution

This is implemented by a Configuration Profile.

mobileconfig profile info:

com.apple.preferences.sharing.SharingPrefsExtension:
homeSharingUIStatus:
0
legacySharingUIStatus:
0
mediaSharingUIStatus:
0

Supportive Information

The following resource is also helpful.

• https://github.com/usnistgov/macos_security

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.

References

• 800-53|AC-3
• 800-53|AC-17
• CCE|CCE-85436-4

Source

• Tenable.com/audits