The macOS system must disable the built-in web server.
An XCCDF Rule
Description
The built-in web server is a nonessential service built into macOS and must be disabled. Note: The built in web server service is disabled at startup by default macOS.
- ID
- SV-259484r958472_rule
- Version
- APPL-14-002008
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the macOS system to disable the built-in web server with the following command:
/bin/launchctl disable system/org.apache.httpd
The system may need to be restarted for the update to take effect.