From a1ce3ac0e60c8f52d1c9cde439bd4121f6f71f9f Mon Sep 17 00:00:00 2001 From: Bob Gendler Date: Thu, 11 Sep 2025 11:54:04 -0400 Subject: [PATCH] Updated baseline files --- baselines/800-171.yaml | 1 + baselines/800-53r5_high.yaml | 1 + baselines/800-53r5_low.yaml | 1 + baselines/800-53r5_moderate.yaml | 1 + baselines/all_rules.yaml | 1 + baselines/cisv8.yaml | 1 + baselines/cmmc_lvl1.yaml | 1 + baselines/cmmc_lvl2.yaml | 1 + baselines/cnssi-1253_high.yaml | 1 + baselines/cnssi-1253_low.yaml | 1 + baselines/cnssi-1253_moderate.yaml | 1 + 11 files changed, 11 insertions(+) diff --git a/baselines/800-171.yaml b/baselines/800-171.yaml index b0820991..241235e9 100644 --- a/baselines/800-171.yaml +++ b/baselines/800-171.yaml @@ -104,6 +104,7 @@ profile: - os_screensaver_loginwindow_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_screen_time_prompt_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant diff --git a/baselines/800-53r5_high.yaml b/baselines/800-53r5_high.yaml index 4fc6112d..82c008e5 100644 --- a/baselines/800-53r5_high.yaml +++ b/baselines/800-53r5_high.yaml @@ -114,6 +114,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant - os_ssh_server_alive_count_max_configure diff --git a/baselines/800-53r5_low.yaml b/baselines/800-53r5_low.yaml index 50e45972..eb76f645 100644 --- a/baselines/800-53r5_low.yaml +++ b/baselines/800-53r5_low.yaml @@ -98,6 +98,7 @@ profile: - os_safari_reader_summary_disable - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant - os_sshd_fips_compliant diff --git a/baselines/800-53r5_moderate.yaml b/baselines/800-53r5_moderate.yaml index 7c1243bd..85f2cfd4 100644 --- a/baselines/800-53r5_moderate.yaml +++ b/baselines/800-53r5_moderate.yaml @@ -112,6 +112,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant - os_ssh_server_alive_count_max_configure diff --git a/baselines/all_rules.yaml b/baselines/all_rules.yaml index a8c2454b..3efa6d7d 100644 --- a/baselines/all_rules.yaml +++ b/baselines/all_rules.yaml @@ -161,6 +161,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_screen_time_prompt_enable - os_skip_unlock_with_watch_enable - os_sleep_and_display_sleep_apple_silicon_enable diff --git a/baselines/cisv8.yaml b/baselines/cisv8.yaml index a07db2ed..62b3fa97 100644 --- a/baselines/cisv8.yaml +++ b/baselines/cisv8.yaml @@ -103,6 +103,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_unlock_with_watch_enable - os_sleep_and_display_sleep_apple_silicon_enable - os_software_update_app_update_enforce diff --git a/baselines/cmmc_lvl1.yaml b/baselines/cmmc_lvl1.yaml index fe6c2829..0a634e92 100644 --- a/baselines/cmmc_lvl1.yaml +++ b/baselines/cmmc_lvl1.yaml @@ -67,6 +67,7 @@ profile: - os_safari_reader_summary_disable - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_unlock_with_watch_enable - os_tftpd_disable - os_unlock_active_user_session_disable diff --git a/baselines/cmmc_lvl2.yaml b/baselines/cmmc_lvl2.yaml index 61850b7b..1e2e5bc5 100644 --- a/baselines/cmmc_lvl2.yaml +++ b/baselines/cmmc_lvl2.yaml @@ -127,6 +127,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_screen_time_prompt_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant diff --git a/baselines/cnssi-1253_high.yaml b/baselines/cnssi-1253_high.yaml index 1695d789..7dfcc4b0 100644 --- a/baselines/cnssi-1253_high.yaml +++ b/baselines/cnssi-1253_high.yaml @@ -141,6 +141,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_screen_time_prompt_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant diff --git a/baselines/cnssi-1253_low.yaml b/baselines/cnssi-1253_low.yaml index 4ac0a06e..f9ca038e 100644 --- a/baselines/cnssi-1253_low.yaml +++ b/baselines/cnssi-1253_low.yaml @@ -139,6 +139,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_screen_time_prompt_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant diff --git a/baselines/cnssi-1253_moderate.yaml b/baselines/cnssi-1253_moderate.yaml index 5ffb1f6f..f8fbfb59 100644 --- a/baselines/cnssi-1253_moderate.yaml +++ b/baselines/cnssi-1253_moderate.yaml @@ -140,6 +140,7 @@ profile: - os_setup_assistant_filevault_enforce - os_sip_enable - os_siri_prompt_disable + - os_skip_apple_intelligence_enable - os_skip_screen_time_prompt_enable - os_skip_unlock_with_watch_enable - os_ssh_fips_compliant