usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 05:53:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

more system settings

Browse Source
This commit is contained in:
Allen Golbig
2022-08-04 11:32:27 -04:00
parent 7c8c7de2e8
commit 92c3a59ed8
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rules/sysprefs/sysprefs_system_wide_preferences_configure.yaml
View File

@@ -1,9 +1,9 @@
id: system_settings_system_wide_preferences_configure
title: "Require Administrator Password to Modify System-Wide Preferences"
discussion: |
The system _MUST_ be configured to require an administrator password in order to modify the system-wide preferences in System Preferences.
The system _MUST_ be configured to require an administrator password in order to modify the system-wide preferences in System Settings.
Some Preference Panes in System Preferences contain settings that affect the entire system. Requiring a password to unlock these system-wide settings reduces the risk of a non-authorized user modifying system configurations.
Some Preference Panes in System Settings contain settings that affect the entire system. Requiring a password to unlock these system-wide settings reduces the risk of a non-authorized user modifying system configurations.
check: |
/usr/bin/security authorizationdb read system.preferences 2> /dev/null | /usr/bin/grep -A 1 "<key>shared</key>" | /usr/bin/grep -c "<false/>"
result:

2
rules/sysprefs/sysprefs_time_machine_encrypted_configure.yaml
View File

@@ -15,7 +15,7 @@ check: |
result:
integer: 0
fix: |
. Go to System Preferences -> Time Machine
. Go to System Settings -> Time Machine
. Click *Select Disk*
. Select existing Backup Disk under *Available Disks*
. Click *Encrypt Backups*

4
sections/systempreferences.yaml → sections/systemsettings.yaml
View File

@@ -1,5 +1,5 @@
name: "System Preferences"
name: "System Settings"
description: |
This section contains the configuration and enforcement of the settings within the macOS System Preferences application.
This section contains the configuration and enforcement of the settings within the macOS System Settings application.
NOTE: The check/fix commands outlined in this section _MUST_ be run by a user with elevated privileges.