Fix for 5.1.7, 5.1.8

2026-03-04 09:13:19 +00:00 · 2022-03-07 12:06:52 -05:00
parent 6e4d206a8b
commit 05307ecbba
4 changed files with 4 additions and 4 deletions
--- a/baselines/cis_lvl1.yaml
+++ b/baselines/cis_lvl1.yaml
@@ -53,7 +53,6 @@ profile:
      - os_terminal_secure_keyboard_enable
      - os_time_offset_limit_configure
      - os_unlock_active_user_session_disable
-      - os_world_writable_library_folder_configure
      - os_world_writable_system_folder_configure
  - section: "passwordpolicy"
    rules:
--- a/baselines/cis_lvl2.yaml
+++ b/baselines/cis_lvl2.yaml
@@ -56,6 +56,7 @@ profile:
      - os_time_offset_limit_configure
      - os_unlock_active_user_session_disable
      - os_world_writable_library_folder_configure
+      - os_world_writable_system_folder_configure
  - section: "passwordpolicy"
    rules:
      - pwpolicy_account_lockout_enforce_five
@@ -121,4 +122,4 @@ profile:
      - supplemental_filevault
      - supplemental_firewall_pf
      - supplemental_password_policy
-      - supplemental_smartcard
+      - supplemental_smartcard
--- a/rules/os/os_world_writable_library_folder_configure.yaml
+++ b/rules/os/os_world_writable_library_folder_configure.yaml
@@ -33,13 +33,12 @@ references:
    - N/A
  cis:
    benchmark:
-      - 5.1.8 (level 1)
+      - 5.1.8 (level 2)
    controls v8:
      - 3.3
 macOS:
  - "12.0"
 tags:
-  - cis_lvl1
  - cis_lvl2
  - cisv8
 mobileconfig: false
--- a/rules/os/os_world_writable_system_folder_configure.yaml
+++ b/rules/os/os_world_writable_system_folder_configure.yaml
@@ -38,6 +38,7 @@ macOS:
  - "12.0"
 tags:
  - cis_lvl1
+  - cis_lvl2
  - cisv8
 mobileconfig: false
 mobileconfig_info: