• Joined on 2025-07-20
michael commented on issue usnistgov/macos_security#80 2026-01-19 18:29:10 +00:00
New privacy switches in macOS 15 are not managed by allowDiagnosticSubmission

@robertgendler commented on GitHub:

@JamminR That's expected when it's not a setting that Apple officially supports as being manageable. Nobody has programmed it to "lock". But if you re open…

michael commented on issue usnistgov/macos_security#80 2026-01-19 18:29:10 +00:00
New privacy switches in macOS 15 are not managed by allowDiagnosticSubmission

@JamminR commented on GitHub:

I think we found those and added rules for them. https://github.com/usnistgov/macos_security/blob/main/rules/system_settings/system_settings_improve_assistive_voice…

michael commented on issue usnistgov/macos_security#75 2026-01-19 18:29:09 +00:00
os_world_writable_library_folder_configure.yaml blocked by SIP?

@iamflaurian commented on GitHub:

Hey @golbiga

I add the command in various formats into a script that will be deployed using Jamf Pro. I did not touch it because it worked before updating…

michael commented on issue usnistgov/macos_security#75 2026-01-19 18:29:09 +00:00
os_world_writable_library_folder_configure.yaml blocked by SIP?

@iamflaurian commented on GitHub:

Does it mean, CIS has to remove these rule because of SIP block? I'll create an account and also a ticket :) Thanks @golbiga

michael commented on issue usnistgov/macos_security#74 2026-01-19 18:29:09 +00:00
fix for os_ssh_server_alive_interval_configure.yaml is not successful

@georgalis commented on GitHub:

FWIW - Apple ships with /bin/bash from 2007, version 3.2.57(1), an update for that is not expected due to GNU licensing. While that version is generally compatible…

michael commented on issue usnistgov/macos_security#75 2026-01-19 18:29:09 +00:00
os_world_writable_library_folder_configure.yaml blocked by SIP?

@golbiga commented on GitHub:

@iamflaurian so this is a CIS issue, I've let some folks know, but I would recommend opening a ticket with them (create an account on https://workbench.cisecurity.org…

michael commented on issue usnistgov/macos_security#75 2026-01-19 18:29:09 +00:00
os_world_writable_library_folder_configure.yaml blocked by SIP?

@golbiga commented on GitHub:

Forgot to mention this was resolve in 121dc6e44f. Thanks for reporting the issue.

michael commented on issue dutchcoders/transfer.sh#139 2026-01-19 18:29:09 +00:00
transfer.sh Moved Permanently

@nlkguy commented on GitHub:

~$ curl https://transfer.sh/ --upload-file backup.log curl: (92) HTTP/2 stream 0 was not closed cleanly: INTERNAL_ERROR (err 2)

back then transfer.sh only worked…

michael commented on issue dutchcoders/transfer.sh#140 2026-01-19 18:29:09 +00:00
direct link for fullscreen video

@paolafrancesca commented on GitHub:

hi @mcreasindo-git you are looking for the inline alias: 6b8eff8322/README.md (l)

michael opened issue usnistgov/macos_security#76 2026-01-19 18:29:09 +00:00
system_settings_software_update_enforce.yaml has been silently deprecated by Apple
michael closed issue dutchcoders/transfer.sh#140 2026-01-19 18:29:09 +00:00
direct link for fullscreen video
michael commented on issue dutchcoders/transfer.sh#141 2026-01-19 18:29:09 +00:00
Endless redirects using SSL/TLS with docker-image

@paolafrancesca commented on GitHub:

@rompeldunk there was actually a bug in the redirect handler, fixed on #441

michael opened issue usnistgov/macos_security#77 2026-01-19 18:29:09 +00:00
system_settings_improve_search_disable.yaml mis-identified as a CIS Level 1 control
michael commented on issue dutchcoders/transfer.sh#141 2026-01-19 18:29:09 +00:00
Endless redirects using SSL/TLS with docker-image

@yelodevopsi commented on GitHub:

Thanks for the quick reply!

Yes, I corrected that error previously and tested without true too - Still the redirect problem persists. The command below is…

michael opened issue usnistgov/macos_security#78 2026-01-19 18:29:09 +00:00
system_settings_improve_assistive_voice_disable.yaml mis-identified CIS control number
michael commented on issue dutchcoders/transfer.sh#141 2026-01-19 18:29:09 +00:00
Endless redirects using SSL/TLS with docker-image

@paolafrancesca commented on GitHub:

@rompeldunk --force-https is a boolean flag, you don't need to pass true as a value, setting it is enough passing true seems to break the parsing of…

michael closed issue usnistgov/macos_security#76 2026-01-19 18:29:09 +00:00
system_settings_software_update_enforce.yaml has been silently deprecated by Apple
michael closed issue usnistgov/macos_security#77 2026-01-19 18:29:09 +00:00
system_settings_improve_search_disable.yaml mis-identified as a CIS Level 1 control
michael commented on issue dutchcoders/transfer.sh#141 2026-01-19 18:29:09 +00:00
Endless redirects using SSL/TLS with docker-image

@yelodevopsi commented on GitHub:

Seem that the error still persist after I purged and pulled :latest tag.

Could you confirm that you're able to run the SSL-based transfer.sh docker…

michael commented on issue usnistgov/macos_security#74 2026-01-19 18:29:09 +00:00
fix for os_ssh_server_alive_interval_configure.yaml is not successful

@jeolsen commented on GitHub:

@robertgendler I'm copying into an empty script.sh file for testing, adding #!/bin/sh to the top, and then running sudo sh ~/script.sh to execute it. <img…