Turning on file sharing increases the visibility and attack surface of a system unnecessarily. Impact: File Sharing can be used to share documents with other users but hardened servers should be used rather than user endpoints. Rationale: By disabling file sharing, the remote attack surface and risk of unauthorized access to files stored on the system is reduced. When sharing with SMB, each user that will access the Mac must have SMB enabled. Apple warns that SMB sharing stores passwords is a less secure fashion than AFP sharing and anyone with system access can gain access to the password for that account. Server Message Block (SMB), Common Internet File System (CIFS) When Windows (or possibly Linux) computers need to access file shared on a Mac, SMB/CIFS file sharing is commonly used. anyone in the 'staff' group, including the guest account if it is enabled). Users' 'Public' folders (and the 'Drop Box' folder inside) are shared to any user account that has sharing access to the computer (i.e. Individual home folders are shared to their respective user accounts. The entire hard disk is shared to administrator user accounts. Information Apple's File Sharing uses a combination of SMB (Windows sharing) and AFP (Mac sharing) Two common ways to share files using File Sharing are: Apple File Protocol (AFP) AFP automatically uses encrypted logins, so this method of sharing files is fairly secure.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |