• Joined on 2025-07-20
michael commented on issue usnistgov/macos_security#157 2026-01-19 18:29:27 +00:00
Generate recommendations Python script relies on very out of date Ruby gems

@sammcj commented on GitHub:

Oh wow ok - yeah the bundle install with --binstubs seemed to fix it!

Thank you!

michael opened issue usnistgov/macos_security#160 2026-01-19 18:29:27 +00:00
Compliance percentage incorrect when exempted rules pass #267 “best practice!!!
michael opened issue usnistgov/macos_security#161 2026-01-19 18:29:27 +00:00
Indicate manual rules that are included in the baseline
michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@paolafrancesca commented on GitHub:

thanks

michael opened issue usnistgov/macos_security#162 2026-01-19 18:29:27 +00:00
CIS Manual Recommendations not generating properly
michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@paolafrancesca commented on GitHub:

damn, I tested only once, it worked, now not anymore can you ask in the nginx mailing list?

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@srinisubramanian commented on GitHub:

Here’s what I did for now.

  • Switched off auth in transfer.sh
  • Enabled http basic auth in nginx for the transfersh site except for GET
  • This…
michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@paolafrancesca commented on GitHub:

just to know, did you ask in the nginx mailing list? otherwise I will do

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@srinisubramanian commented on GitHub:

Will do

michael closed issue usnistgov/macos_security#160 2026-01-19 18:29:27 +00:00
Compliance percentage incorrect when exempted rules pass #267 “best practice!!!
michael closed issue usnistgov/macos_security#161 2026-01-19 18:29:27 +00:00
Indicate manual rules that are included in the baseline
michael closed issue usnistgov/macos_security#162 2026-01-19 18:29:27 +00:00
CIS Manual Recommendations not generating properly
michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@srinisubramanian commented on GitHub:

I will ask tomorrow. If you want to go ahead

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@paolafrancesca commented on GitHub:

@srinisubramanian I found the solution: proxy_request_buffering off;

available from nginx 1.7.11: https://nginx.org/en/docs/http/ngx_http_proxy_module.ht…

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@paolafrancesca commented on GitHub:

@srinisubramanian just subscribed to the mailing list and waiting for confirmation email as well

https://forum.nginx.org may be an alternative if you want…

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@paolafrancesca commented on GitHub:

oki thanks

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@srinisubramanian commented on GitHub:

Having trouble getting on to that mailing list. Confirmation mail never reaches, tried a couple.

@aspacca can you please post?

michael commented on issue dutchcoders/transfer.sh#213 2026-01-19 18:29:27 +00:00
502 error - Authentication popup never shown in browser

@srinisubramanian commented on GitHub:

@aspacca This works, thanks. Also the behavior is such that the user id/pwd is prompted right at the beginning which is good. Thanks for following up on this.

michael commented on issue usnistgov/macos_security#161 2026-01-19 18:29:27 +00:00
Indicate manual rules that are included in the baseline

@brodjieski commented on GitHub:

Added NOTE in PDF/HTML to rules that are marked as manual.

michael commented on issue usnistgov/macos_security#161 2026-01-19 18:29:27 +00:00
Indicate manual rules that are included in the baseline

@bernstei commented on GitHub:

My preference would be to indicate this in the remediation script's output, although I agree that'd be non trivial - it's easy enough to note that it's manual when…