• Joined on 2025-07-20
michael closed issue usnistgov/macos_security#54 2026-01-19 18:29:03 +00:00
generate_scap.py is not functioning as expected
michael commented on issue dutchcoders/transfer.sh#123 2026-01-19 18:29:03 +00:00
File overwritten when multiple files with same name uploaded via POST

@anihm136 commented on GitHub:

Sure, will do. Might take some time depending on my schedule, so do let me know if anyone else wants to take it up in the meantime.

michael commented on issue dutchcoders/transfer.sh#121 2026-01-19 18:29:03 +00:00
504 gateway time-out response from server

@Anarios commented on GitHub:

Same happened from web UI.

michael commented on issue dutchcoders/transfer.sh#123 2026-01-19 18:29:03 +00:00
File overwritten when multiple files with same name uploaded via POST

@paolafrancesca commented on GitHub:

thanks @anihm136

since you are already working on the POST handler do you mind implementing solution 1? :)

thanks

michael opened issue usnistgov/macos_security#54 2026-01-19 18:29:03 +00:00
generate_scap.py is not functioning as expected
michael commented on issue dutchcoders/transfer.sh#121 2026-01-19 18:29:03 +00:00
504 gateway time-out response from server

@Anarios commented on GitHub:

Doesn't seem like I can reopen the issue, though, @stefanbenten

michael commented on issue dutchcoders/transfer.sh#121 2026-01-19 18:29:03 +00:00
504 gateway time-out response from server

@stefanbenten commented on GitHub:

Hello @Anarios , could you please try again and reopen if needed? Since the file is being ran through a virus scanner and then afterwards being uploaded, there…

michael commented on issue usnistgov/macos_security#48 2026-01-19 18:29:03 +00:00
MacOS 15 defintion for CCE-94310 "Configure Sudo To Log Events" calls the same testID twice

@vanderpol commented on GitHub:

Correct, just noticed this error when re-processing the content to create a DISA STIG friendly benchmark. The error was found in the stig-oval file you created…

michael commented on issue usnistgov/macos_security#48 2026-01-19 18:29:03 +00:00
MacOS 15 defintion for CCE-94310 "Configure Sudo To Log Events" calls the same testID twice

@robertgendler commented on GitHub:

@vanderpol scap issue right?

michael commented on issue dutchcoders/transfer.sh#119 2026-01-19 18:29:03 +00:00
Support for folder upload/sharing

@paolafrancesca commented on GitHub:

hi @spantheslayer this is already support throught POST requests. I see it's not properly documented, you can find some context here: https://github.com/dut…

michael commented on issue usnistgov/macos_security#50 2026-01-19 18:29:03 +00:00
Generate findings report in XLS and PDF format

@jmahlman commented on GitHub:

I don't see the benefit of this as Audit findings would be per device. The purpose of the documentation is to show how you secure the devices. Audit reports need to…

michael commented on issue usnistgov/macos_security#51 2026-01-19 18:29:03 +00:00
Request for Script or Function to Rollback Executed Commands

@narender34 commented on GitHub:

Logged Idea in discussions.

michael opened issue usnistgov/macos_security#52 2026-01-19 18:29:03 +00:00
Migration from MSCP 1 to MSCP 2.0
michael opened issue usnistgov/macos_security#53 2026-01-19 18:29:03 +00:00
com.apple.mail.managed
michael commented on issue usnistgov/macos_security#46 2026-01-19 18:29:02 +00:00
Platform SSO and os_unlock_active_user_session_disable

@robertgendler commented on GitHub:

Fix in dev_sequoia_psso

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@robertgendler commented on GitHub:

Sooo I see the "issue"

In the yaml we're looking for /usr/bin/grep -Ec '^(auth\s+sufficient\s+pam_smartcard.so

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@vanderpol commented on GitHub:

Just checking to see if this was able to be resolved for the next release?

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@robertgendler commented on GitHub:

YES! Need to push the dev branch with the generate_scap script.

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@robertgendler commented on GitHub:

Resolved with updated oval 5.12 checks

michael closed issue usnistgov/macos_security#45 2026-01-19 18:29:02 +00:00
Inconsistent Output with Guest User Directory Detection Script