Details

Apple Events is a technology that allows one program to communicate with other programs. Remote Apple Events allows a program on one computer to communicate with a program on a different computer.

Rationale:

Disabling Remote Apple Events mitigates the risk of an unauthorized program gaining access to the system.

Impact:

With remote Apple events turned on, an AppleScript program running on another Mac can interact with the local computer.

Solution

Perform the following to disable Remote Apple Events:
Graphical Method:

Open System Preferences

Select Sharing

Verify that Remote Apple Evens is not set

Terminal Method:
Run the following commands to set Remote Apple Events to Off:

$ sudo systemsetup -setremoteappleevents off

setremoteappleevents: Off

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3423

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7
• CSCv7|9.2

Source

• Tenable.com/audits