The macOS system must disable Network File System service.

STIG ID: APPL-14-002003  |  SRG: SRG-OS-000080-GPOS-00048 |  Severity: medium |  CCI: CCI-000213 |  Vulnerability Id: V-259479 | 

Vulnerability Discussion

Support for Network File Systems (NFS) services is nonessential and, therefore, must be disabled.

Check

Verify the macOS system is configured to disable network file system service with the following command:

/bin/launchctl print-disabled system | /usr/bin/grep -c '"com.apple.nfsd" => disabled'

If the result is not "1", this is a finding.

Fix

Configure the macOS system to disable network file system service with the following command:

/bin/launchctl disable system/com.apple.nfsd

The system may need to be restarted for the update to take effect.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.