The macOS system must disable Unix-to-Unix Copy Protocol (UUCP) service.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-277089APPL-26-002006SV-277089r1149391_ruleCCI-000213medium
Description
The system must not have the UUCP service active. UUCP, a set of programs that enables sending files between different Unix systems and sending commands to be executed on another system, is not essential and must be disabled to prevent unauthorized connection of devices, transfer of information, and tunneling. Note: UUCP service is disabled at startup by default with macOS.
STIGDate
Apple macOS 26 (Tahoe) Security Technical Implementation Guide2026-02-11

Related Frameworks

4 paths across 3 frameworks
NIST 800-531 mapping
AC-3
1.00
  • DISA · V1R2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.1.1
1.00
  • DISA · V1R2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.1.2
1.00
  • DISA · V1R2 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000213
1.00
  • DISA · V1R2 · disa_xccdf · related

Details

Check Text (C-277089r1149391_chk)

Verify the macOS system is configured to disable UUCP service with the following command: result="FAIL" enabled=$(/bin/launchctl print-disabled system | /usr/bin/grep '"com.apple.uucp" => enabled') running=$(/bin/launchctl print system/com.apple.uucp 2>/dev/null) if [[ -z "$running" ]] && [[ -z "$enabled" ]]; then result="PASS" elif [[ -n "$running" ]]; then result=result+" RUNNING" elif [[ -n "$enabled" ]]; then result=result+" ENABLED" fi echo $result If the result is not "PASS", this is a finding.

Fix Text (F-81149r1149325_fix)

Configure the macOS system to disable UUCP service with the following command: /bin/launchctl bootout system/com.apple.uucp /bin/launchctl disable system/com.apple.uucp The system may need a restart for the update to take effect.