usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-16 14:02:07 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

refactor[rules] os_anti_virus_installed and timed

Browse Source 
Removed auto remediation since it cannot occur if SIP is enabled.
Added a note about SIP.
This commit is contained in:
Bob Gendler
2024-03-25 12:01:57 -04:00
parent 168231c297
commit 4ca9d995da
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rules/os/os_anti_virus_installed.yaml
View File

@@ -9,11 +9,13 @@ check: |
result:
integer: 2
fix: |
[source,bash]
[source,shell]
----
/bin/launchctl load -w /Library/Apple/System/Library/LaunchDaemons/com.apple.XProtect.daemon.scan.plist
/bin/launchctl load -w /Library/Apple/System/Library/LaunchDaemons/com.apple.XprotectFramework.PluginService.plist
----
NOTE: These services cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.
references:
cce:
- CCE-92758-2

4
rules/os/os_time_server_enabled.yaml
View File

@@ -9,10 +9,12 @@ check: |
result:
integer: 1
fix: |
[source,bash]
[source,shell]
----
/bin/launchctl load -w /System/Library/LaunchDaemons/com.apple.timed.plist
----
NOTE: The service `timed` cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.
references:
cce:
- CCE-92916-6