Updating rule files

2026-02-03 14:03:24 +00:00 · 2025-08-14 14:05:03 -04:00
parent 1ca7f2969b
commit 44864e8149
6 changed files with 10 additions and 2 deletions
--- a/rules/auth/auth_smartcard_certificate_trust_enforce_high.yaml
+++ b/rules/auth/auth_smartcard_certificate_trust_enforce_high.yaml
@@ -42,6 +42,7 @@ tags:
  - cnssi-1253_high
  - cnssi-1253_moderate
  - cnssi-1253_low
+  - cmmc_lvl2
 mobileconfig: true
 mobileconfig_info:
  com.apple.security.smartcard:
--- a/rules/os/os_anti_virus_installed.yaml
+++ b/rules/os/os_anti_virus_installed.yaml
@@ -36,6 +36,9 @@ references:
      - 10.5
      - 10.1
      - 10.2
+  cmmc:
+    - SI.L1-3.14.4
+    - SI.L1-3.14.4
 macOS:
  - '26.0'
 tags:
--- a/rules/os/os_home_folders_secure.yaml
+++ b/rules/os/os_home_folders_secure.yaml
@@ -40,7 +40,9 @@ references:
      - 3.3
  cmmc:
    - AC.L1-3.1.1
+    - AC.L1-3.1.2
    - AC.L2-3.1.5
+    - AC.L2-3.1.6
 macOS:
  - '26.0'
 tags:
--- a/rules/os/os_screensaver_timeout_loginwindow_enforce.yaml
+++ b/rules/os/os_screensaver_timeout_loginwindow_enforce.yaml
@@ -38,8 +38,6 @@ references:
      - N/A
    controls v8:
      - 4.3
-  cmmc:
-    - AC.L2-3.1.10
 macOS:
  - '26.0'
 odv:
--- a/rules/system_settings/system_settings_external_intelligence_disable.yaml
+++ b/rules/system_settings/system_settings_external_intelligence_disable.yaml
@@ -60,6 +60,8 @@ tags:
  - cnssi-1253_moderate
  - cis_lvl1
  - cis_lvl2
+  - cmmc_lvl1
+  - cmmc_lvl2
 severity: medium
 mobileconfig: true
 mobileconfig_info:
--- a/rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml
+++ b/rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml
@@ -60,6 +60,8 @@ tags:
  - cnssi-1253_moderate
  - cis_lvl1
  - cis_lvl2
+  - cmmc_lvl1
+  - cmmc_lvl2
 severity: medium
 mobileconfig: true
 mobileconfig_info: