[MacTUG] SECURITY(Vulnerability): AFP Guest Access Enabled

[Dani Roloson]

> Unless it's required, you should disable guest access. To do so under
> MacOS X, go to System Preferences-->Sharing-->File Sharing, and then
> click the Stop button.

This doesn't just stop guest access but stops all access. 

The above isn't true for 10.6 or 10.5 anyhow
(What's it in 10.4, Marlon? 8-)
since it is checkbox not a Stop button.

You really want System Preferences->Accounts->Guest Account
and uncheck "Allow guests to connect to shared folders".

The UNIX command for those of us with a ton of machines and Apple Remote
Desktop is

defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server All
owGuestAccess 0

Dani