The macOS system must enable SSH server for remote access sessions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-259442	APPL-14-000080	SV-259442r940948_rule		Medium

Description
Remote access sessions must use encrypted methods to protect unauthorized individuals from gaining access. Satisfies: SRG-OS-000080-GPOS-00048,SRG-OS-000113-GPOS-00058,SRG-OS-000425-GPOS-00189,SRG-OS-000426-GPOS-00190

STIG	Date
Apple macOS 14 (Sonoma) Security Technical Implementation Guide	2024-01-10

Details

Check Text ( C-63181r940946_chk )
Verify the macOS system is configured to enable SSH server for remote access sessions with the following command: /bin/launchctl print-disabled system | /usr/bin/grep -c '"com.openssh.sshd" => enabled' If the result is not "1", this is a finding.

Fix Text (F-63089r940947_fix)
Configure the macOS system to enable SSH server for remote access sessions with the following command: /bin/launchctl enable system/com.openssh.sshd