• Joined on 2025-07-20
michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@robertgendler commented on GitHub:

Resolved with updated oval 5.12 checks

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@robertgendler commented on GitHub:

Sooo I see the "issue"

In the yaml we're looking for /usr/bin/grep -Ec '^(auth\s+sufficient\s+pam_smartcard.so

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@vanderpol commented on GitHub:

Just checking to see if this was able to be resolved for the next release?

michael commented on issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.

@robertgendler commented on GitHub:

YES! Need to push the dev branch with the generate_scap script.

michael closed issue usnistgov/macos_security#43 2026-01-19 18:29:02 +00:00
system_settings_ssh_disable (Commands discrepancy)
michael commented on issue usnistgov/macos_security#43 2026-01-19 18:29:02 +00:00
system_settings_ssh_disable (Commands discrepancy)

@robertgendler commented on GitHub:

This has been discussed with CIS, DISA, and the team. Checks (basically any service [screen sharing, ssh, smb, etc]) will get updated to also kill the service…

michael commented on issue usnistgov/macos_security#43 2026-01-19 18:29:02 +00:00
system_settings_ssh_disable (Commands discrepancy)

@robertgendler commented on GitHub:

This was solved and added.

Slightly different but same result, killing all the services if running..

michael commented on issue dutchcoders/transfer.sh#117 2026-01-19 18:29:02 +00:00
Reporting Abuse

@stefanbenten commented on GitHub:

Hello @isaacKenyon,

thanks for reporting. The file has been removed. For the future, there is a contact us button near the end of the page, which definitely…

michael commented on issue usnistgov/macos_security#45 2026-01-19 18:29:02 +00:00
Inconsistent Output with Guest User Directory Detection Script

@brodjieski commented on GitHub:

Hello! This check is derived from the CIS benchmark and uses the method that they include. The team at CIS is going to review this rule and check and we will…

michael opened issue usnistgov/macos_security#47 2026-01-19 18:29:02 +00:00
False negative with V-268546 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command.
michael opened issue usnistgov/macos_security#48 2026-01-19 18:29:02 +00:00
MacOS 15 defintion for CCE-94310 "Configure Sudo To Log Events" calls the same testID twice
michael closed issue usnistgov/macos_security#46 2026-01-19 18:29:02 +00:00
Platform SSO and os_unlock_active_user_session_disable
michael commented on issue dutchcoders/transfer.sh#115 2026-01-19 18:29:02 +00:00
Example Zsh/Bash function for transfer.sh homepage

@keks24 commented on GitHub:

@aspacca

I already did that in #478, which also got merged by @stefanbenten. :)

michael closed issue dutchcoders/transfer.sh#118 2026-01-19 18:29:02 +00:00
service side encryption for local backend
michael closed issue dutchcoders/transfer.sh#120 2026-01-19 18:29:02 +00:00
max-downloads seems not to delete the file
michael commented on issue usnistgov/macos_security#46 2026-01-19 18:29:02 +00:00
Platform SSO and os_unlock_active_user_session_disable

@s2959219 commented on GitHub:

Platform SSO sets the string value in system.login.screensaver to psso-screensaver.

When pSSO is configured and the compliance script fixes os_unlock_active_u…

michael commented on issue usnistgov/macos_security#46 2026-01-19 18:29:02 +00:00
Platform SSO and os_unlock_active_user_session_disable

@robertgendler commented on GitHub:

Fix in dev_sequoia_psso

michael commented on issue dutchcoders/transfer.sh#113 2026-01-19 18:29:01 +00:00
[Demand] Can provide a list of historical files on the page

@wisinfun commented on GitHub:

hello @wisinfun , not sure I understand what you mean

like this,It would be better to have a search box <img width="1401" alt="CleanShot 2022-04-05 at 14 24…

michael commented on issue dutchcoders/transfer.sh#112 2026-01-19 18:29:01 +00:00
The LISTENER environment variable isn't working with Docker.

@paolafrancesca commented on GitHub:

I was aware of the hardcoded listener value before in the Dockerfile and not so happy about it but I didn't want to remove since it could break a lot of…

michael commented on issue dutchcoders/transfer.sh#114 2026-01-19 18:29:01 +00:00
500 Internal Server Error

@stefanbenten commented on GitHub:

Issue is fixed. A new account limit on the Storj backend was introduced, causing uploads to fail.