• Joined on 2025-07-20
michael commented on issue usnistgov/macos_security#171 2026-01-19 18:29:30 +00:00
firmware password requirement not applicable to Apple silicon according to STIG

@bernstei commented on GitHub:

It's working now - weird.

michael commented on issue usnistgov/macos_security#171 2026-01-19 18:29:30 +00:00
firmware password requirement not applicable to Apple silicon according to STIG

@bernstei commented on GitHub:

Hmm - the i386 tag is there on Big Sur and Monterey, but I'm sure I've gotten this showing up as a rule failure on M1 macs, because I had to track it down and…

michael commented on issue dutchcoders/transfer.sh#224 2026-01-19 18:29:30 +00:00
How to show texts instead of download button?

@paolafrancesca commented on GitHub:

@khvnhtung the right tag is v1.1.6 please, use dutchcoders/transfer.sh:vX.Y.Z instead of latest since you'll be sure to have a proper release

michael commented on issue dutchcoders/transfer.sh#224 2026-01-19 18:29:30 +00:00
How to show texts instead of download button?

@paolafrancesca commented on GitHub:

@khvnhtung please, provide some steps to reproduce the issue. maybe a screenshot as well in the preview page with the download button there should be the…

michael closed issue usnistgov/macos_security#172 2026-01-19 18:29:30 +00:00
os_policy_banner_ssh_configure fails on Ventura even after remediation
michael commented on issue dutchcoders/transfer.sh#224 2026-01-19 18:29:30 +00:00
How to show texts instead of download button?

@paolafrancesca commented on GitHub:

it seems that lstat on the saved file (that will return the content type of the file to enable content preview) fails when running in the docker container:…

michael closed issue usnistgov/macos_security#173 2026-01-19 18:29:30 +00:00
Ventura firewall mobileconfig fails to install
michael closed issue usnistgov/macos_security#174 2026-01-19 18:29:30 +00:00
compliance script should be able to say which rules fail
michael commented on issue dutchcoders/transfer.sh#224 2026-01-19 18:29:30 +00:00
How to show texts instead of download button?

@khvnhtung commented on GitHub:

<img width="1125" alt="Screen Shot 2020-03-15 at 21 10 00" src="https://user-images.githubusercontent.com/33808069/76703087-55c7b100-6701-11ea-818c-d91b9cb22261.png…

michael commented on issue dutchcoders/transfer.sh#223 2026-01-19 18:29:30 +00:00
Download links aren't resumable

@HamedSepehr commented on GitHub:

I don't how I should test that... So far I have tested aria2c -c, wget -c and IDM and none of them was able to resume download.

michael commented on issue dutchcoders/transfer.sh#225 2026-01-19 18:29:30 +00:00
Can't configure nginx reverse proxy to transfer.sh

@paolafrancesca commented on GitHub:

thanks @vyachkonovalov for the support

michael commented on issue usnistgov/macos_security#172 2026-01-19 18:29:30 +00:00
os_policy_banner_ssh_configure fails on Ventura even after remediation

@robertgendler commented on GitHub:

Good find!

  bannerText="$ODV"
  if /usr/bin/diff -q /etc/banner <(echo "$bannerText"); then
    echo "1"
  else
    echo "0"
  fi

Maybe…

michael commented on issue usnistgov/macos_security#172 2026-01-19 18:29:30 +00:00
os_policy_banner_ssh_configure fails on Ventura even after remediation

@robertgendler commented on GitHub:

Well then the ODV would need to be changed if additional text is added.

I'll create a branch and switch it to the test.

michael commented on issue usnistgov/macos_security#172 2026-01-19 18:29:30 +00:00
os_policy_banner_ssh_configure fails on Ventura even after remediation

@robertgendler commented on GitHub:

Well I found another way also `test "$(cat /etc/banner)" = "$bannerText" && echo "1"

michael commented on issue usnistgov/macos_security#174 2026-01-19 18:29:30 +00:00
compliance script should be able to say which rules fail

@robertgendler commented on GitHub:

The compliance script actually writes to unified logging as well as the /Library/Logs/$baseline_baseline.log

The /Library/Logs is JUST the last run of the…

michael commented on issue usnistgov/macos_security#172 2026-01-19 18:29:30 +00:00
os_policy_banner_ssh_configure fails on Ventura even after remediation

@bernstei commented on GitHub:

I like the test based one as well, although both it and the diff based one will fail if there's additional text in the banner, which I'm not sure is desirable.

michael commented on issue usnistgov/macos_security#172 2026-01-19 18:29:30 +00:00
os_policy_banner_ssh_configure fails on Ventura even after remediation

@bernstei commented on GitHub:

Looks plausible to me (although I can believe there could be issues with newlines, etc). Do you want to make a branch, or should I just patch my script and test it…

michael commented on issue usnistgov/macos_security#173 2026-01-19 18:29:30 +00:00
Ventura firewall mobileconfig fails to install

@robertgendler commented on GitHub:

We missed the stig controls on system_settings_firewall_enable

But I think it would make sense for us to add the enable firewall stuff to stealth mode as…

michael commented on issue usnistgov/macos_security#173 2026-01-19 18:29:30 +00:00
Ventura firewall mobileconfig fails to install

@robertgendler commented on GitHub:

This was merged into main. closing the issue.

michael closed issue usnistgov/macos_security#175 2026-01-19 18:29:30 +00:00
Rule 7.7 Secure User's Home Folder is not reporting correctly