updated changelog

This commit is contained in:
Allen Golbig
2025-09-09 20:51:54 -04:00
parent faab04ccbc
commit a3a30ca246

View File

@@ -2,161 +2,56 @@
This document provides a high-level view of the changes to the macOS Security Compliance Project.
## [Sequoia, Revision 2.0] - 2025-07-01
* Rules
* Added Rules
* os_mail_smart_reply_disable
* os_notes_transcription_disable
* os_notes_transcription_summary_disable
* os_safari_reader_summary_disable
* os_sshd_per_source_penalties_configure
* Modified Rules
* os_genmoji_disable.yaml
* os_implement_cryptography.yaml
* os_iphone_mirroring_disable.yaml
* os_mail_summary_disable.yaml
* os_nfsd_disable.yaml
* os_parental_controls_enable.yaml
* os_password_hint_remove.yaml
* os_power_nap_disable.yaml
* os_separate_functionality.yaml
* os_sleep_and_display_sleep_apple_silicon_enable.yaml
* os_sudo_log_enforce.yaml
* os_time_server_enabled.yaml
* os_unlock_active_user_session_disable
* os_writing_tools_disable.yaml
* pwpolicy_50_percent.yaml
* pwpolicy_history_enforce.yaml
* pwpolicy_upper_case_character_enforce.yaml
* supplemental_cis_manual.yaml
* system_settings_automatic_login_disable.yaml
* system_settings_bluetooth_sharing_disable.yaml
* system_settings_content_caching_disable.yaml
* system_settings_external_intelligence_disable.yaml
* system_settings_external_intelligence_sign_in_disable.yaml
* system_settings_guest_access_smb_disable.yaml
* system_settings_guest_account_disable.yaml
* system_settings_improve_assistive_voice_disable.yaml
* system_settings_improve_search_disable.yaml
* system_settings_internet_sharing_disable.yaml
* system_settings_loginwindow_loginwindowtext_enable.yaml
* system_settings_loginwindow_prompt_username_password_enforce.yaml
* system_settings_media_sharing_disabled.yaml
* system_settings_password_hints_disable.yaml
* system_settings_printer_sharing_disable.yaml
* system_settings_rae_disable.yaml
* system_settings_remote_management_disable.yaml
* system_settings_screen_sharing_disable.yaml
* system_settings_screensaver_ask_for_password_delay_enforce.yaml
* system_settings_screensaver_timeout_enforce.yaml
* system_settings_siri_disable.yaml
* system_settings_siri_listen_disable.yaml
* system_settings_smbd_disable.yaml
* system_settings_software_update_enforce.yaml
* system_settings_ssh_disable.yaml
* system_settings_time_server_configure.yaml
* system_settings_time_server_enforce.yaml
* system_settings_wake_network_access_disable.yaml
* Bug Fixes
* Baselines
* Updated CIS to v1.1.0
* Updated DISA STIG Ver 1, Rel 3
* Scripts
* generate_guidance
* bug fixes
* generate_scap.py
* bug fixes
## [Sequoia, Revision 1.1] - 2024-12-16
## [Tahoe, Revision 1.0] - 2025-09-
* Rules
* Added Rules
* os_iphone_mirroring_disable
* os_mail_summary_disable
* os_photos_enhanced_search_disable
* system_settings_external_intelligence_disable
* system_settings_external_intelligence_sign_in_disable
* os_loginwindow_adminhostinfo_disabled
* os_safari_clear_history_disable
* os_safari_private_browsing_disable
* system_settings_download_software_update_enforce
* system_settings_security_update_install
* Modified Rules
* os_sleep_and_display_sleep_apple_silicon_enable
* os_sudo_log_enforce
* os_world_writable_library_folder_configure
* os_password_autofill_disable
* pwpolicy_alpha_numeric_enforce
* pwpolicy_custom_regex_enforce
* pwpolicy_lower_case_character_enforce.yaml
* pwpolicy_max_lifetime_enforce
* pwpolicy_minimum_lifetime_enforce
* pwpolicy_history_enforce
* pwpolicy_account_lockout_timeout_enforce
* audit_auditd_enabled
* os_external_storage_access_defined
* os_httpd_disable
* os_network_storage_restriction
* os_screensaver_loginwindow_enforce
* os_tftpd_disable
* os_time_server_enabled
* os_uucp_disable
* pwpolicy_account_lockout_enforce
* pwpolicy_prevent_dictionary_words
* pwpolicy_simple_sequence_disable
* pwpolicy_account_lockout_timeout_enforce
* pwpolicy_history_enforce
* pwpolicy_lower_case_character_enforce
* pwpolicy_max_lifetime_enforce
* pwpolicy_minimum_length_enforce
* pwpolicy_minimum_lifetime_enforce
* pwpolicy_special_character_enforce
* pwpolicy_upper_case_character_enforce.yaml
* system_settings_improve_assistive_voice_disable
* pwpolicy_upper_case_character_enforce
* system_settings_bluetooth_sharing_disable
* system_settings_hot_corners_secure
* system_settings_location_services_disable
* system_settings_location_services_enable
* system_settings_screen_sharing_disable
* system_settings_ssh_disable
* system_settings_time_machine_encrypted_configure
* Removed Rules
* system_settings_cd_dvd_sharing_disable
* system_settings_security_update_install
* os_show_filename_extensions_enable
* system_settings_software_update_enforce
* Bug Fixes
* Baselines
* Added DISA STIG v1r1
* Added CIS Level (Draft -> Final)
* Updated CNSSI-1253
## [Sequoia, Revision 1.0] - 2024-09-12
* Rules
* Added Rules
* os_genmoji_disable
* os_image_generation_disable
* os_iphone_mirroring_disable
* os_sudo_log_enforce
* os_writing_tools_disable
* Modified Rules
* os_anti_virus_installed
* os_gatekeeper_enable
* os_ssh_fips_compliant
* system_settings_firewall_enable
* system_settings_firewall_stealth_mode_enable
* system_settings_gatekeeper_identified_developers_allowed
* system_settings_media_sharing_disabled
* DDM Support
* auth_pam_login_smartcard_enforce
* auth_pam_su_smartcard_enforce
* auth_pam_sudo_smartcard_enforce
* auth_ssh_password_authentication_disable
* os_external_storage_restriction
* os_network_storage_restriction
* os_policy_banner_ssh_enforce
* os_sshd_channel_timeout_configure
* os_sshd_client_alive_count_max_configure
* os_sshd_client_alive_interval_configure
* os_sshd_fips_compliant
* os_sshd_login_grace_time_configure
* os_sshd_permit_root_login_configure
* os_sshd_unused_connection_timeout_configure
* os_sudo_timeout_configure
* pwpolicy_account_lockout_enforce
* pwpolicy_account_lockout_timeout_enforce
* pwpolicy_alpha_numeric_enforce
* pwpolicy_custom_regex_enforce
* pwpolicy_history_enforce
* pwpolicy_max_lifetime_enforce
* pwpolicy_minimum_length_enforce
* pwpolicy_simple_sequence_disable
* pwpolicy_special_character_enforce
* Removed Rules
* os_firewall_log_enable
* os_gatekeeper_rearm
* os_safari_popups_disabled
* Bug Fixes
* Baselines
* Modified existing baselines
* Updated 800-171 to Revision 3
* Scripts
* generate_guidance
* Support for Declarative Device Management (DDM)
* Added support for severity
* Added flag for consolidated configuration profile
* Updated DDM logic for nested keys
* Added shell check to compliance script
* Updated current user check
* generate_baseline
* generate_mappings
* Bug Fixes
* generate_scap
* Added support for severity
* Support for oval 5.12.1
* Support for scap 1.4
* Added shellcommand for all tests