diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index fa355106..84693624 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -43,6 +43,7 @@ This document provides a high-level view of the changes to the macOS Security Co *** pwpolicy_simple_sequence_disable.yaml *** pwpolicy_special_character_enforce.yaml *** pwpolicy_upper_case_character_enforce.yaml +*** system_settings_system_wide_preferences_configure *** System Preferences -> System Settings ** Deleted Rules *** os_sudoers_tty_configure @@ -66,6 +67,9 @@ This document provides a high-level view of the changes to the macOS Security Co ** generate_mappings *** Bug Fixes ** generate_scap +*** Added support for ODV +*** Added support for new checks +*** Generate scap, xccdf, or oval *** Bug Fixes -* SCAP + diff --git a/README.adoc b/README.adoc index eb6f91a8..1fa00165 100644 --- a/README.adoc +++ b/README.adoc @@ -23,6 +23,10 @@ endif::[] The macOS Security Compliance Project is an link:LICENSE.md[open source] effort to provide a programmatic approach to generating security guidance. The configuration settings in this document were derived from National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53, _Security and Privacy Controls for Information Systems and Organizations_, Revision 5. This is a joint project of federal operational IT Security staff from the National Institute of Standards and Technology (NIST), National Aeronautics and Space Administration (NASA), Defense Information Systems Agency (DISA), and Los Alamos National Laboratory (LANL). +This project is the technical implementation of NIST Special Publication, 800-219 https://csrc.nist.gov/publications/detail/sp/800-219/final[Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)]. NIST Special Publication 800-219 is the official guidance from for automated secure configuration for macOS. + +Apple supports the macOS Security Compliance Project with information on their https://support.apple.com/guide/sccc/macos-security-compliance-project-sccc22685bb2/web[Security Certifications and Compliance Center] page. + This project can be used as a resource to easily create customized security baselines of technical security controls by leveraging a library of atomic actions which are mapped to the compliance requirements defined in NIST SP 800-53 (Rev. 5). It can also be used to develop customized guidance to meet the particular cybersecurity needs of any organization. To learn more about the project, please see the {uri-repo}/wiki[wiki]. diff --git a/VERSION.yaml b/VERSION.yaml index a24cf7aa..a2f8aafe 100644 --- a/VERSION.yaml +++ b/VERSION.yaml @@ -1,4 +1,4 @@ os: "13.0" version: "Ventura Guidance, Revision 1" cpe: o:apple:macos:13.0 -date: "2022-XX-XX" +date: "2022-10-19"