From c8d3339dee8ca3c660f4719b7f202737affb306e Mon Sep 17 00:00:00 2001 From: Allen Golbig Date: Sun, 14 Apr 2024 19:20:13 -0400 Subject: [PATCH 1/7] updated changelog --- CHANGELOG.adoc | 56 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 56 insertions(+) diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index 96f2b281..7290e437 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -2,6 +2,62 @@ This document provides a high-level view of the changes to the macOS Security Compliance Project. +== [Sonoma, Revision 1.1] - 2024-04-XX + +* Rules +** Added Rules +*** os_dictation_disable +** Modified Rules +*** os_anti_virus_installed +*** os_install_log_retention_configure (https://github.com/usnistgov/macos_security/issues/292[#292]) +*** os_on_device_dictation_enforce +*** os_password_hint_remove (https://github.com/usnistgov/macos_security/issues/343[#343]) +*** os_recovery_lock_enable +*** os_setup_assistant_filevault_enforce (https://github.com/usnistgov/macos_security/issues/362[#362]) +*** os_time_server_enabled +*** os_unlock_active_user_session_disable (https://github.com/usnistgov/macos_security/pull/365[#365]) +*** os_world_writable_system_folder_configure (https://github.com/usnistgov/macos_security/issues/355[#355]) +*** pwpolicy_custom_regex_enforce (https://github.com/usnistgov/macos_security/pull/363[#363]) +*** system_settings_apple_watch_unlock_disable.yaml +*** system_settings_location_services_disable (link:https://github.com/usnistgov/macos_security/issues/372[#372]) +*** system_settings_location_services_enable (link:https://github.com/usnistgov/macos_security/issues/372[#372]) +*** system_settings_loginwindow_loginwindowtext_enable +*** system_settings_system_wide_preferences_configure +*** system_settings_time_server_configure.yaml (link:https://github.com/usnistgov/macos_security/pull/336[#336]) +*** system_settings_touchid_unlock_disable.yaml +*** supplemental_cis_manual +** Deleted Rules +*** os_safari_javascript_enabled.yaml +** Other +*** Added tags to all supplemental rule files +*** Removed duplicate entries in `pwpolicy.xml` (link:https://github.com/usnistgov/macos_security/issues/373[#373]) + +* Baselines +** Added Baselines +*** macOS 14 STIG +*** iOS 17 STIG + +* Scripts +** generate_guidance +*** Added `--quiet` (link:https://github.com/usnistgov/macos_security/issues/301[#301]) +*** Modified Configuration Profile Payload (link:https://github.com/usnistgov/macos_security/issues/315[#315]) +*** Added `--audit` to compliance script (link:https://github.com/usnistgov/macos_security/pull/333/files[#333]) +*** Added `--no-rcs`to zsh sheband (link:https://github.com/usnistgov/macos_security/issues/377[#377]) +*** Bug Fixes +**** link:https://github.com/usnistgov/macos_security/issues/319[#319] +**** link:https://github.com/usnistgov/macos_security/issues/332[#332] +** generate_baseline +*** Bug Fixes +** generate_mappings +*** Bug Fixes +** generate_scap +*** Bug Fixes +** Other +*** Added `util` folder +**** Added `generate_checklist.py` +**** Added `mscp_local_report.py` +*** Updated `enablePF-mscp.sh` + == [Sonoma, Revision 1.0] - 2023-09-21 * Rules From 32cc5803d50d9590326c23e4aa8f1dfd2f3b2f55 Mon Sep 17 00:00:00 2001 From: Allen Golbig Date: Sun, 14 Apr 2024 19:28:26 -0400 Subject: [PATCH 2/7] updated changelog --- CHANGELOG.adoc | 29 +++++++++++++++-------------- 1 file changed, 15 insertions(+), 14 deletions(-) diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index 7290e437..f810db3b 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -8,29 +8,29 @@ This document provides a high-level view of the changes to the macOS Security Co ** Added Rules *** os_dictation_disable ** Modified Rules -*** os_anti_virus_installed +*** os_anti_virus_installed (https://github.com/usnistgov/macos_security/issues/345[#345]) *** os_install_log_retention_configure (https://github.com/usnistgov/macos_security/issues/292[#292]) *** os_on_device_dictation_enforce *** os_password_hint_remove (https://github.com/usnistgov/macos_security/issues/343[#343]) *** os_recovery_lock_enable *** os_setup_assistant_filevault_enforce (https://github.com/usnistgov/macos_security/issues/362[#362]) -*** os_time_server_enabled +*** os_time_server_enabled (https://github.com/usnistgov/macos_security/issues/345[#345]) *** os_unlock_active_user_session_disable (https://github.com/usnistgov/macos_security/pull/365[#365]) *** os_world_writable_system_folder_configure (https://github.com/usnistgov/macos_security/issues/355[#355]) *** pwpolicy_custom_regex_enforce (https://github.com/usnistgov/macos_security/pull/363[#363]) -*** system_settings_apple_watch_unlock_disable.yaml -*** system_settings_location_services_disable (link:https://github.com/usnistgov/macos_security/issues/372[#372]) -*** system_settings_location_services_enable (link:https://github.com/usnistgov/macos_security/issues/372[#372]) +*** system_settings_apple_watch_unlock_disable.yaml (https://github.com/usnistgov/macos_security/issues/326[#326]) +*** system_settings_location_services_disable (https://github.com/usnistgov/macos_security/issues/372[#372]) +*** system_settings_location_services_enable (https://github.com/usnistgov/macos_security/issues/372[#372]) *** system_settings_loginwindow_loginwindowtext_enable *** system_settings_system_wide_preferences_configure -*** system_settings_time_server_configure.yaml (link:https://github.com/usnistgov/macos_security/pull/336[#336]) -*** system_settings_touchid_unlock_disable.yaml +*** system_settings_time_server_configure.yaml (https://github.com/usnistgov/macos_security/pull/336[#336]) +*** system_settings_touchid_unlock_disable.yaml (https://github.com/usnistgov/macos_security/issues/326[#326]) *** supplemental_cis_manual ** Deleted Rules *** os_safari_javascript_enabled.yaml ** Other *** Added tags to all supplemental rule files -*** Removed duplicate entries in `pwpolicy.xml` (link:https://github.com/usnistgov/macos_security/issues/373[#373]) +*** Removed duplicate entries in `pwpolicy.xml` (https://github.com/usnistgov/macos_security/issues/373[#373]) * Baselines ** Added Baselines @@ -39,14 +39,15 @@ This document provides a high-level view of the changes to the macOS Security Co * Scripts ** generate_guidance -*** Added `--quiet` (link:https://github.com/usnistgov/macos_security/issues/301[#301]) -*** Modified Configuration Profile Payload (link:https://github.com/usnistgov/macos_security/issues/315[#315]) -*** Added `--audit` to compliance script (link:https://github.com/usnistgov/macos_security/pull/333/files[#333]) -*** Added `--no-rcs`to zsh sheband (link:https://github.com/usnistgov/macos_security/issues/377[#377]) +*** Added `--quiet` (https://github.com/usnistgov/macos_security/issues/301[#301]) +*** Modified Configuration Profile Payload (https://github.com/usnistgov/macos_security/issues/315[#315]) +*** Added `--audit` to compliance script (https://github.com/usnistgov/macos_security/pull/333/files[#333]) +*** Added `--no-rcs`to zsh sheband (https://github.com/usnistgov/macos_security/issues/377[#377]) *** Bug Fixes -**** link:https://github.com/usnistgov/macos_security/issues/319[#319] -**** link:https://github.com/usnistgov/macos_security/issues/332[#332] +**** https://github.com/usnistgov/macos_security/issues/319[#319] +**** https://github.com/usnistgov/macos_security/issues/332[#332] ** generate_baseline +*** Add tags to baselines (https://github.com/usnistgov/macos_security/issues/324[#324]) *** Bug Fixes ** generate_mappings *** Bug Fixes From b9e8e8ceb883862d7b7245d8f3a62cae3f2ddaba Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Mon, 22 Apr 2024 09:40:07 -0400 Subject: [PATCH 3/7] Update CHANGELOG.adoc --- CHANGELOG.adoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index f810db3b..54801691 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -9,6 +9,7 @@ This document provides a high-level view of the changes to the macOS Security Co *** os_dictation_disable ** Modified Rules *** os_anti_virus_installed (https://github.com/usnistgov/macos_security/issues/345[#345]) +*** os_camera_disable (https://github.com/usnistgov/macos_security/issues/388[#388]) *** os_install_log_retention_configure (https://github.com/usnistgov/macos_security/issues/292[#292]) *** os_on_device_dictation_enforce *** os_password_hint_remove (https://github.com/usnistgov/macos_security/issues/343[#343]) @@ -35,7 +36,6 @@ This document provides a high-level view of the changes to the macOS Security Co * Baselines ** Added Baselines *** macOS 14 STIG -*** iOS 17 STIG * Scripts ** generate_guidance @@ -111,4 +111,4 @@ This document provides a high-level view of the changes to the macOS Security Co ** generate_scap *** Added iOS support *** Added support for pwpolicy regex -*** Bug Fixes \ No newline at end of file +*** Bug Fixes From d5e8e7e3de705972ad4c3f54efd5fedaebc24a0f Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Mon, 22 Apr 2024 09:49:13 -0400 Subject: [PATCH 4/7] Update CHANGELOG.adoc --- CHANGELOG.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index 54801691..7180be00 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -2,7 +2,7 @@ This document provides a high-level view of the changes to the macOS Security Compliance Project. -== [Sonoma, Revision 1.1] - 2024-04-XX +== [Sonoma, Revision 2.0] - 2024-04-XX * Rules ** Added Rules From 8a1f6082dd5db5e04aedfc85bfbe9d2598ee5d55 Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Mon, 22 Apr 2024 09:54:58 -0400 Subject: [PATCH 5/7] Update CHANGELOG.adoc --- CHANGELOG.adoc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index 7180be00..89f6e222 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -2,7 +2,7 @@ This document provides a high-level view of the changes to the macOS Security Compliance Project. -== [Sonoma, Revision 2.0] - 2024-04-XX +== [Sonoma, Revision 2.0] - 2024-04-23 * Rules ** Added Rules From afd1da593b5429d32168c077be958f946cb44756 Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Mon, 22 Apr 2024 09:55:24 -0400 Subject: [PATCH 6/7] Update VERSION.yaml --- VERSION.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/VERSION.yaml b/VERSION.yaml index 80d6a469..30949651 100644 --- a/VERSION.yaml +++ b/VERSION.yaml @@ -2,4 +2,4 @@ os: "14.0" platform: macOS version: "Sonoma Guidance, Revision 2.0" cpe: o:apple:macos:14.0 -date: "2024-04-XX" +date: "2024-04-23" From 8ff9b66680f2727172388a818a727297199e9097 Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Mon, 22 Apr 2024 10:20:24 -0400 Subject: [PATCH 7/7] Update README.adoc --- README.adoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.adoc b/README.adoc index 048edb50..b6b269a6 100644 --- a/README.adoc +++ b/README.adoc @@ -52,6 +52,8 @@ Part 39 of the Federal Acquisition Regulations, section 39.101 paragraph (c) sta |Allen Golbig|Jamf |Dan Brodjieski|NASA |John Mahlman IV|Leidos +|Aaron Kegerreis|DISA +|Marco Piñeryo|State Department |Jason Blake|NIST |Blair Heiserman|NIST |Joshua Glemza|NASA