michael

michael closed issue usnistgov/macos_security#118

2026-01-19 18:29:18 +00:00

generate_baseline.py invalid escape sequence

michael opened issue usnistgov/macos_security#118

2026-01-19 18:29:18 +00:00

generate_baseline.py invalid escape sequence

michael opened issue usnistgov/macos_security#119

2026-01-19 18:29:18 +00:00

os_newsyslog_files_*_configure don't take /etc/newsyslog.d into account

michael opened issue usnistgov/macos_security#120

2026-01-19 18:29:18 +00:00

os_asl_log_files_*_configure are completely broken

michael commented on issue dutchcoders/transfer.sh#172

2026-01-19 18:29:18 +00:00

Can one configure the file hash size to increase security ?

@paolafrancesca commented on GitHub:

thanks for the suggestion @parisni #372

michael commented on issue dutchcoders/transfer.sh#173

2026-01-19 18:29:18 +00:00

Include handler errors in the log file

@stefanbenten commented on GitHub:

I would suggest to chose either stderr or log, but not both.

michael commented on issue dutchcoders/transfer.sh#174

2026-01-19 18:29:18 +00:00

self hosted transfer.sh reports the wrong URL when run behind TLS terminating web proxy

@cheeseandcereal commented on GitHub:

Set your proxy to add the X-Forwarded-Proto: https header to your transfer.sh server instance when proxying traffic

michael commented on issue dutchcoders/transfer.sh#174

2026-01-19 18:29:18 +00:00

self hosted transfer.sh reports the wrong URL when run behind TLS terminating web proxy

@dburman commented on GitHub:

Thanks!

michael commented on issue usnistgov/macos_security#115

2026-01-19 18:29:18 +00:00

Rules are tagged with 'stig' that do not have STIG References

@brodjieski commented on GitHub:

min password length in STIG should be 14

michael opened issue dutchcoders/transfer.sh#175

2026-01-19 18:29:18 +00:00

[QUESTION] Can max-downloads and max-days used together?

michael opened issue dutchcoders/transfer.sh#176

2026-01-19 18:29:18 +00:00

[QUESTION] Is there any API which returns the server settings.

michael opened issue dutchcoders/transfer.sh#177

2026-01-19 18:29:18 +00:00

Moving from travis-ci to github action - HELP WANTED :)

michael closed issue dutchcoders/transfer.sh#175

2026-01-19 18:29:18 +00:00

[QUESTION] Can max-downloads and max-days used together?

michael closed issue dutchcoders/transfer.sh#176

2026-01-19 18:29:18 +00:00

[QUESTION] Is there any API which returns the server settings.

michael closed issue dutchcoders/transfer.sh#177

2026-01-19 18:29:18 +00:00

Moving from travis-ci to github action - HELP WANTED :)

michael commented on issue usnistgov/macos_security#117

2026-01-19 18:29:18 +00:00

os_world_writable_system_folder_configure new restricted folder

@ww-adamb commented on GitHub:

@golbiga Would it be better to exclude SIP protected files by filtering on restricted instead of maintaining an ignore list?

/usr/bin/find /System/Volumes/…

michael commented on issue usnistgov/macos_security#117

2026-01-19 18:29:18 +00:00

os_world_writable_system_folder_configure new restricted folder

@golbiga commented on GitHub:

Fixed.

michael opened issue usnistgov/macos_security#115

2026-01-19 18:29:17 +00:00

Rules are tagged with 'stig' that do not have STIG References

michael commented on issue dutchcoders/transfer.sh#172

2026-01-19 18:29:17 +00:00

Can one configure the file hash size to increase security ?

@stefanbenten commented on GitHub:

Fixed with 49c6d7ee4f

michael commented on issue usnistgov/macos_security#113

2026-01-19 18:29:17 +00:00

DISA customer pointed out potential issue with regex in pwpolicy_custom_regex_enforce

@robertgendler commented on GitHub:

I believe this is all fixed in the sonoma branch. So closing the issue.