usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-16 22:12:08 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

Merge branch 'dev_ventura' into ventura

Browse Source
This commit is contained in:
Bob Gendler
2022-10-19 20:59:18 -04:00
parent e34ae8b5be e0699b2ba2
commit 07fe336fc1
3 changed files with 10 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
CHANGELOG.adoc
View File

@@ -43,6 +43,7 @@ This document provides a high-level view of the changes to the macOS Security Co
*** pwpolicy_simple_sequence_disable.yaml
*** pwpolicy_special_character_enforce.yaml
*** pwpolicy_upper_case_character_enforce.yaml
*** system_settings_system_wide_preferences_configure
*** System Preferences -> System Settings
** Deleted Rules
*** os_sudoers_tty_configure
@@ -66,6 +67,9 @@ This document provides a high-level view of the changes to the macOS Security Co
** generate_mappings
*** Bug Fixes
** generate_scap
*** Added support for ODV
*** Added support for new checks
*** Generate scap, xccdf, or oval
*** Bug Fixes
* SCAP

4
README.adoc
View File

@@ -23,6 +23,10 @@ endif::[]
The macOS Security Compliance Project is an link:LICENSE.md[open source] effort to provide a programmatic approach to generating security guidance. The configuration settings in this document were derived from National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, _Security and Privacy Controls for Information Systems and Organizations_, Revision 5. This is a joint project of federal operational IT Security staff from the National Institute of Standards and Technology (NIST), National Aeronautics and Space Administration (NASA), Defense Information Systems Agency (DISA), and Los Alamos National Laboratory (LANL).
This project is the technical implementation of NIST Special Publication, 800-219 https://csrc.nist.gov/publications/detail/sp/800-219/final[Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)]. NIST Special Publication 800-219 is the official guidance from for automated secure configuration for macOS.
Apple supports the macOS Security Compliance Project with information on their https://support.apple.com/guide/sccc/macos-security-compliance-project-sccc22685bb2/web[Security Certifications and Compliance Center] page.
This project can be used as a resource to easily create customized security baselines of technical security controls by leveraging a library of atomic actions which are mapped to the compliance requirements defined in NIST SP 800-53 (Rev. 5). It can also be used to develop customized guidance to meet the particular cybersecurity needs of any organization.
To learn more about the project, please see the {uri-repo}/wiki[wiki].

2
VERSION.yaml
View File

@@ -1,4 +1,4 @@
os: "13.0"
version: "Ventura Guidance, Revision 1"
cpe: o:apple:macos:13.0
date: "2022-XX-XX"
date: "2022-10-19"