diff --git a/rules/sysprefs/sysprefs_bluetooth_prefpane_hide.yaml b/rules/sysprefs/sysprefs_bluetooth_prefpane_hide.yaml index c690ea89..e39d3195 100644 --- a/rules/sysprefs/sysprefs_bluetooth_prefpane_hide.yaml +++ b/rules/sysprefs/sysprefs_bluetooth_prefpane_hide.yaml @@ -4,7 +4,7 @@ discussion: | The Bluetooth System Preference pane _MUST_ be hidden to prevent access to the bluetooth configuration. check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.Bluetooth' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.Bluetooth' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: | diff --git a/rules/sysprefs/sysprefs_internet_accounts_prefpane_disable.yaml b/rules/sysprefs/sysprefs_internet_accounts_prefpane_disable.yaml index ec53ae59..a71efe32 100644 --- a/rules/sysprefs/sysprefs_internet_accounts_prefpane_disable.yaml +++ b/rules/sysprefs/sysprefs_internet_accounts_prefpane_disable.yaml @@ -8,7 +8,7 @@ discussion: | Some organizations may allow the use and configuration of the built-in Mail.app, Calendar.app, and Contacts.app for organizational communication. Information System Security Officers (ISSOs) may make the risk-based decision not to disable the Internet Accounts System Preference pane to avoid losing this functionality, but they are advised to first fully weigh the potential risks posed to their organization. ==== check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: | diff --git a/rules/sysprefs/sysprefs_internet_accounts_prefpane_hide.yaml b/rules/sysprefs/sysprefs_internet_accounts_prefpane_hide.yaml index bcdc8f21..0086cb5c 100644 --- a/rules/sysprefs/sysprefs_internet_accounts_prefpane_hide.yaml +++ b/rules/sysprefs/sysprefs_internet_accounts_prefpane_hide.yaml @@ -8,7 +8,7 @@ discussion: | Some organizations may allow the use and configuration of the built-in Mail.app, Calendar.app, and Contacts.app for organizational communication. Information System Security Officers (ISSOs) may make the risk-based decision not to disable the Internet Accounts System Preference pane to avoid losing this functionality, but they are advised to first fully weigh the potential risks posed to their organization. ==== check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.internetaccounts' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: | diff --git a/rules/sysprefs/sysprefs_siri_prefpane_disable.yaml b/rules/sysprefs/sysprefs_siri_prefpane_disable.yaml index eb18ed5f..8a53aac4 100644 --- a/rules/sysprefs/sysprefs_siri_prefpane_disable.yaml +++ b/rules/sysprefs/sysprefs_siri_prefpane_disable.yaml @@ -5,7 +5,7 @@ discussion: | Disabling the system preference pane prevents the users from configuring Siri. check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: | diff --git a/rules/sysprefs/sysprefs_siri_prefpane_hide.yaml b/rules/sysprefs/sysprefs_siri_prefpane_hide.yaml index 2d06d867..791929ff 100644 --- a/rules/sysprefs/sysprefs_siri_prefpane_hide.yaml +++ b/rules/sysprefs/sysprefs_siri_prefpane_hide.yaml @@ -5,7 +5,7 @@ discussion: | HIding the system preference pane prevents the users from configuring Siri. check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.speech' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: | diff --git a/rules/sysprefs/sysprefs_touchid_prefpane_disable.yaml b/rules/sysprefs/sysprefs_touchid_prefpane_disable.yaml index 3f0af4c9..f3e002c9 100644 --- a/rules/sysprefs/sysprefs_touchid_prefpane_disable.yaml +++ b/rules/sysprefs/sysprefs_touchid_prefpane_disable.yaml @@ -5,7 +5,7 @@ discussion: | Disabling the system preference pane prevents the users from configuring Touch ID. check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.password' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.password' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: | diff --git a/rules/sysprefs/sysprefs_wallet_applepay_prefpane_disable.yaml b/rules/sysprefs/sysprefs_wallet_applepay_prefpane_disable.yaml index 39f95438..eea464b9 100644 --- a/rules/sysprefs/sysprefs_wallet_applepay_prefpane_disable.yaml +++ b/rules/sysprefs/sysprefs_wallet_applepay_prefpane_disable.yaml @@ -5,7 +5,7 @@ discussion: | Disabling the system preference pane prevents the users from configuring Wallet and Apple Pay. check: | - /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.wallet' | /usr/bin/awk '{ if ($1 >= 1) {print "1"} else {print "0"}}' + /usr/bin/profiles -P -o stdout | /usr/bin/grep -c 'com.apple.preferences.wallet' | /usr/bin/awk '{ if ($1 >= 2) {print "1"} else {print "0"}}' result: integer: 1 fix: |