• Joined on 2025-07-20
michael commented on issue usnistgov/macos_security#286 2026-01-19 18:29:57 +00:00
os_guest_access_smb_disable

@thebestoneever commented on GitHub:

This is how we did it in stonix:

https://github.com/CSD-Public/stonix/blob/master/src/stonix_resources/rules/DisableGuestAccess.py

Have a Super…

michael commented on issue dutchcoders/transfer.sh#337 2026-01-19 18:29:57 +00:00
Transfer.sh is down right now

@nl5887 commented on GitHub:

We had some issues during the migration, but ping is always disabled.

michael commented on issue usnistgov/macos_security#288 2026-01-19 18:29:57 +00:00
audit_flags_fm_configure

@robertgendler commented on GitHub:

Updated with commit 78756b826b

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@golbiga commented on GitHub:

It actually should be DisableAirDrop = 1

ebca093853/rules/os/os_airdrop_disable.yaml

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@bernstei commented on GitHub:

Thanks for fixing this in the big_sur branch. How hard would it be to (automatically?) include the issue title in the commit message, rather than just the number?

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@golbiga commented on GitHub:

merged with main

michael commented on issue usnistgov/macos_security#288 2026-01-19 18:29:57 +00:00
audit_flags_fm_configure

@golbiga commented on GitHub:

merged with main

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@paolafrancesca commented on GitHub:

That's total nonsense

please, @TheAssassin keep it respectful :)

feel free to open a PR, I'm sorry you were expecting a confirmation for this on my…

michael commented on issue usnistgov/macos_security#288 2026-01-19 18:29:57 +00:00
audit_flags_fm_configure

@cipineda commented on GitHub:

I'm testing dev_sonoma and found that this issue is back:

The validation script is: `/usr/bin/awk -F':' '/^flags/ { print $NF }' /etc/security/audit_control

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@stek29 commented on GitHub:

Maybe updating readme with note about setting uid/gid when starting the container would be enough?

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@paolafrancesca commented on GitHub:

@stek29 if you are going to suggest how to update the readme I'm happy to do it (you can do as well opening a PR)

michael commented on issue usnistgov/macos_security#291 2026-01-19 18:29:57 +00:00
mobileconfig creation ignores exempt preferences settings

@noambernstein commented on GitHub:

@noambernstein the exemptions are used when you configure something that is "out of compliance" but want to report it as such...

This is what I figured…

michael commented on issue usnistgov/macos_security#291 2026-01-19 18:29:57 +00:00
mobileconfig creation ignores exempt preferences settings

@golbiga commented on GitHub:

@noambernstein the exemptions are used when you configure something that is "out of compliance" but want to report it as such... it's not meant to configure a system…

michael commented on issue usnistgov/macos_security#291 2026-01-19 18:29:57 +00:00
mobileconfig creation ignores exempt preferences settings

@noambernstein commented on GitHub:

Am I just misunderstanding the intended process for a system with exempt rules?

Is this in essence the problem? Are the exempt settings are meant to be…

michael commented on issue dutchcoders/transfer.sh#340 2026-01-19 18:29:57 +00:00
Add Support for Authenticated Uploads

@kamaln7 commented on GitHub:

I can take a stab at implementing something like this. Either pass an "Authentication" header with the key or just a regular parameter. @dutchcoders—is that alright?

michael commented on issue dutchcoders/transfer.sh#340 2026-01-19 18:29:57 +00:00
Add Support for Authenticated Uploads

@Prajjwal commented on GitHub:

@nl5887 I've implemented this. Care to take a look?

michael commented on issue dutchcoders/transfer.sh#340 2026-01-19 18:29:57 +00:00
Add Support for Authenticated Uploads

@Prajjwal commented on GitHub:

@techburgher I've already implemented authentication with auth headers in #105. Hasn't been merged in yet, though. You might want to take a look at it.

michael commented on issue dutchcoders/transfer.sh#341 2026-01-19 18:29:57 +00:00
Can not go back to preview page due to cache overwriting

@paolafrancesca commented on GitHub:

cannot reproduce

michael closed issue usnistgov/macos_security#293 2026-01-19 18:29:57 +00:00
Fix audit_files_(group/mode/owner)_configure
michael commented on issue dutchcoders/transfer.sh#342 2026-01-19 18:29:57 +00:00
Add support Unicode

@paolafrancesca commented on GitHub:

@sergeevabc either you provide some context to your issue or nothing can be done. also I can address only issues in the codebase, not on the hosting part of…