• Joined on 2025-07-20
michael commented on issue dutchcoders/transfer.sh#337 2026-01-19 18:29:57 +00:00
Transfer.sh is down right now

@nl5887 commented on GitHub:

We had some issues during the migration, but ping is always disabled.

michael commented on issue usnistgov/macos_security#288 2026-01-19 18:29:57 +00:00
audit_flags_fm_configure

@robertgendler commented on GitHub:

Updated with commit 78756b826b

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@golbiga commented on GitHub:

It actually should be DisableAirDrop = 1

ebca093853/rules/os/os_airdrop_disable.yaml…

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@bernstei commented on GitHub:

Thanks for fixing this in the big_sur branch. How hard would it be to (automatically?) include the issue title in the commit message, rather than just the number?

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@stek29 commented on GitHub:

since there are no complex entry points, it should be trivial to set uid/gid manually when starting the container imo it should be up to end user to run the image…

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@TheAssassin commented on GitHub:

imo it should be up to end user to run the image properly, and images should not enforce uid/gid on their own

That's total nonsense. A Docker image should…

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@golbiga commented on GitHub:

merged with main

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@paolafrancesca commented on GitHub:

That's total nonsense

please, @TheAssassin keep it respectful :)

feel free to open a PR, I'm sorry you were expecting a confirmation for this on my…

michael commented on issue usnistgov/macos_security#288 2026-01-19 18:29:57 +00:00
audit_flags_fm_configure

@cipineda commented on GitHub:

I'm testing dev_sonoma and found that this issue is back:

The validation script is: `/usr/bin/awk -F':' '/^flags/ { print $NF }' /etc/security/audit_control

michael commented on issue usnistgov/macos_security#287 2026-01-19 18:29:57 +00:00
os_airdrop_disable check and remediation are inconsistent

@golbiga commented on GitHub:

Actually after looking though docs, we have the correct settings for the mobileconfig_info. I'll adjust the check to check for allowAirDrop = 0

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@stek29 commented on GitHub:

Maybe updating readme with note about setting uid/gid when starting the container would be enough?

michael commented on issue dutchcoders/transfer.sh#339 2026-01-19 18:29:57 +00:00
Launching docker version of the server over https

@paolafrancesca commented on GitHub:

@GuillaumeBlin , currently --listener seems to be mandatory: you can add an optional tls listener but that won't replace the plain http listener. I will…

michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@paolafrancesca commented on GitHub:

@stek29 if you are going to suggest how to update the readme I'm happy to do it (you can do as well opening a PR)

michael opened issue usnistgov/macos_security#289 2026-01-19 18:29:57 +00:00
Creation of the Excel doc with Custom references, adds extra rows while the name is the same
michael opened issue usnistgov/macos_security#290 2026-01-19 18:29:57 +00:00
os_sshd_key_exchange_algorithm_configure.yaml does not have a fallback to adding the relevant line
michael commented on issue dutchcoders/transfer.sh#338 2026-01-19 18:29:57 +00:00
[Security Issue] Docker containers' processes run as root

@TheAssassin commented on GitHub:

How do you call nonsense nonsense otherwise? I'm not a fan of seeing security concerns not taken seriously or, worse, calling it a user's problem. Blaming the…

michael opened issue usnistgov/macos_security#291 2026-01-19 18:29:57 +00:00
mobileconfig creation ignores exempt preferences settings
michael closed issue usnistgov/macos_security#289 2026-01-19 18:29:57 +00:00
Creation of the Excel doc with Custom references, adds extra rows while the name is the same
michael closed issue usnistgov/macos_security#291 2026-01-19 18:29:57 +00:00
mobileconfig creation ignores exempt preferences settings
michael closed issue usnistgov/macos_security#290 2026-01-19 18:29:57 +00:00
os_sshd_key_exchange_algorithm_configure.yaml does not have a fallback to adding the relevant line