• Joined on 2025-07-20
michael closed issue usnistgov/macos_security#154 2026-01-19 18:29:26 +00:00
os_install_log_retention_configure - remediation does not match check
michael opened issue dutchcoders/transfer.sh#208 2026-01-19 18:29:26 +00:00
Uploading from Travis CI failed
michael opened issue dutchcoders/transfer.sh#210 2026-01-19 18:29:26 +00:00
[Security] Arbitrary reading of data from backing local storage provider
michael closed issue usnistgov/macos_security#156 2026-01-19 18:29:26 +00:00
Wiki Compliance Script typo
michael opened issue dutchcoders/transfer.sh#209 2026-01-19 18:29:26 +00:00
Output link needs it's own extra line
michael closed issue dutchcoders/transfer.sh#208 2026-01-19 18:29:26 +00:00
Uploading from Travis CI failed
michael closed issue dutchcoders/transfer.sh#210 2026-01-19 18:29:26 +00:00
[Security] Arbitrary reading of data from backing local storage provider
michael closed issue dutchcoders/transfer.sh#209 2026-01-19 18:29:26 +00:00
Output link needs it's own extra line
michael commented on issue usnistgov/macos_security#154 2026-01-19 18:29:26 +00:00
os_install_log_retention_configure - remediation does not match check

@robertgendler commented on GitHub:

Merged into the os branches

michael commented on issue usnistgov/macos_security#155 2026-01-19 18:29:26 +00:00
CIS Lvl 1 6.1.1 failing false positives

@robertgendler commented on GitHub:

When no one is logged in, CURRENT_USER would be blank

Also, the preferences Dameon isn't loaded for the user since there are no users logged in. Therefore…

michael commented on issue usnistgov/macos_security#154 2026-01-19 18:29:26 +00:00
os_install_log_retention_configure - remediation does not match check

@brodjieski commented on GitHub:

For this control, there needs to be a couple of conditions met. First, and primarily, the TTL needs to be defined, since we are trying to retain the logs for X…

michael commented on issue usnistgov/macos_security#154 2026-01-19 18:29:26 +00:00
os_install_log_retention_configure - remediation does not match check

@Acting-IT commented on GitHub:

it did turn out to be the multiple copies of com.apple.install. I added a line to remove /etc/asl/com.apple.install.old. That did the trick.

michael commented on issue usnistgov/macos_security#154 2026-01-19 18:29:26 +00:00
os_install_log_retention_configure - remediation does not match check

@Acting-IT commented on GitHub:

I'm also seeing this in our environment. Was there any resolution? The fix shown above is not resolving this for us.

michael commented on issue usnistgov/macos_security#154 2026-01-19 18:29:26 +00:00
os_install_log_retention_configure - remediation does not match check

@Honestpuck commented on GitHub:

Mine seems to have resolved itself, now I have a problem where multiple files are setting things for installer.log so I will need to build something to remove…

michael commented on issue dutchcoders/transfer.sh#210 2026-01-19 18:29:26 +00:00
[Security] Arbitrary reading of data from backing local storage provider

@paolafrancesca commented on GitHub:

good catch @cheeseandcereal , I would have preferred a responsible disclosure anyway (https://en.wikipedia.org/wiki/Responsible_disclosure)

michael commented on issue dutchcoders/transfer.sh#210 2026-01-19 18:29:26 +00:00
[Security] Arbitrary reading of data from backing local storage provider

@cheeseandcereal commented on GitHub:

Yeah, sorry @aspacca. I was looking for a security contact, but couldn't find anything in the repository. Probably worth putting something here to prevent…

michael commented on issue dutchcoders/transfer.sh#209 2026-01-19 18:29:26 +00:00
Output link needs it's own extra line

@marfier commented on GitHub:

@GalacticLion7 this is the expected behaviour since the beginning

That doesn't explain anything at all.

michael commented on issue dutchcoders/transfer.sh#209 2026-01-19 18:29:26 +00:00
Output link needs it's own extra line

@paolafrancesca commented on GitHub:

@GalacticLion7 this is the expected behaviour since the beginning

michael commented on issue usnistgov/macos_security#156 2026-01-19 18:29:26 +00:00
Wiki Compliance Script typo

@brodjieski commented on GitHub:

Ahh! Thanks for finding the typo! I've updated the wiki to reflect the correct syntax.

michael commented on issue dutchcoders/transfer.sh#208 2026-01-19 18:29:26 +00:00
Uploading from Travis CI failed

@paolafrancesca commented on GitHub:

https://github.com/dutchcoders/transfer.sh#disclaimer

This project repository has no relation with the service at https://transfer.sh that's managed by…