The macOS system must disable the built-in web server.
An XCCDF Rule
Description
The built-in web server is a nonessential service built into macOS and must be disabled. NOTE: The built-in web server is disabled at startup by default with macOS.
- ID
- SV-268484r1034392_rule
- Version
- APPL-15-002008
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the macOS system to disable the built-in web server with the following command:
/bin/launchctl disable system/org.apache.httpd
The system may need to be restarted for the update to take effect.