usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-02 00:12:54 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

updated check to count of 2

Browse Source
This commit is contained in:
Bob Gendler
2022-03-14 10:14:27 -04:00
parent 343abc935a
commit 71c2cf48c5
7 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
rules/sysprefs/sysprefs_bluetooth_prefpane_hide.yaml
View File

@@ -4,7 +4,7 @@ discussion: |
The Bluetooth System Preference pane _MUST_ be hidden to prevent access to the bluetooth configuration.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.Bluetooth' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.Bluetooth' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |

2
rules/sysprefs/sysprefs_internet_accounts_prefpane_disable.yaml
View File

@@ -8,7 +8,7 @@ discussion: |
Some organizations may allow the use and configuration of the built-in Mail.app, Calendar.app, and Contacts.app for organizational communication. Information System Security Officers (ISSOs) may make the risk-based decision not to disable the Internet Accounts System Preference pane to avoid losing this functionality, but they are advised to first fully weigh the potential risks posed to their organization.
====
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |

2
rules/sysprefs/sysprefs_internet_accounts_prefpane_hide.yaml
View File

@@ -8,7 +8,7 @@ discussion: |
Some organizations may allow the use and configuration of the built-in Mail.app, Calendar.app, and Contacts.app for organizational communication. Information System Security Officers (ISSOs) may make the risk-based decision not to disable the Internet Accounts System Preference pane to avoid losing this functionality, but they are advised to first fully weigh the potential risks posed to their organization.
====
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |

2
rules/sysprefs/sysprefs_siri_prefpane_disable.yaml
View File

@@ -5,7 +5,7 @@ discussion: |
Disabling the system preference pane prevents the users from configuring Siri.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |

2
rules/sysprefs/sysprefs_siri_prefpane_hide.yaml
View File

@@ -5,7 +5,7 @@ discussion: |
HIding the system preference pane prevents the users from configuring Siri.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |

2
rules/sysprefs/sysprefs_touchid_prefpane_disable.yaml
View File

@@ -5,7 +5,7 @@ discussion: |
Disabling the system preference pane prevents the users from configuring Touch ID.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.password' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.password' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |

2
rules/sysprefs/sysprefs_wallet_applepay_prefpane_disable.yaml
View File

@@ -5,7 +5,7 @@ discussion: |
Disabling the system preference pane prevents the users from configuring Wallet and Apple Pay.
check: |
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.wallet' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}'
/usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.wallet' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}'
result:
integer: 1
fix: |