refactor[rules]: tweaks for iOS support

2026-03-14 21:22:13 +00:00 · 2023-08-31 15:15:36 -04:00
parent 9d19b6e2ee
commit cd8a084672
50 changed files with 55 additions and 54 deletions
--- a/includes/mscp-data.yaml
+++ b/includes/mscp-data.yaml
@@ -114,4 +114,5 @@ titles:
  cnssi-1253_low: Committee on National Security Systems Instruction No. 1253 (Low)
  cnssi-1253_moderate: Committee on National Security Systems Instruction No. 1253 (Moderate)
  cnssi-1253_high: Committee on National Security Systems Instruction No. 1253 (High)
-  stig: Apple macOS 13 (Ventura) STIG - Ver 1, Rel 2
+  stig: Apple macOS 13 (Ventura) STIG - Ver 1, Rel 2
+  ios_stig:  Apple iOS/iPadOS 16 STIG - Ver 1, Rel 2
--- a/rules/icloud/icloud_backup_disabled.yaml
+++ b/rules/icloud/icloud_backup_disabled.yaml
@@ -38,7 +38,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/icloud/icloud_photo_stream_disable.yaml
+++ b/rules/icloud/icloud_photo_stream_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/icloud/icloud_photos_disable.yaml
+++ b/rules/icloud/icloud_photos_disable.yaml
@@ -37,7 +37,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 supervised: false
 mobileconfig: true
--- a/rules/icloud/icloud_shared_photo_stream_disable.yaml
+++ b/rules/icloud/icloud_shared_photo_stream_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/icloud/icloud_sync_disable.yaml
+++ b/rules/icloud/icloud_sync_disable.yaml
@@ -39,7 +39,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: ¯\_(ツ)_/¯
 mobileconfig: true
--- a/rules/os/os_airdrop_disable.yaml
+++ b/rules/os/os_airdrop_disable.yaml
@@ -40,7 +40,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_airdrop_unmanaged_destination_enable.yaml
+++ b/rules/os/os_airdrop_unmanaged_destination_enable.yaml
@@ -42,7 +42,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_airplay_password_require.yaml
+++ b/rules/os/os_airplay_password_require.yaml
@@ -28,7 +28,7 @@ tags:
  - ios
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: low
 supervised: false
 mobileconfig: true
--- a/rules/os/os_allow_contacts_read_managed_sources_unmanaged_destinations_disable.yaml
+++ b/rules/os/os_allow_contacts_read_managed_sources_unmanaged_destinations_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: low
 supervised: false
 mobileconfig: true
--- a/rules/os/os_allow_contacts_write_managed_sources_unmanaged_destinations_disable.yaml
+++ b/rules/os/os_allow_contacts_write_managed_sources_unmanaged_destinations_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: "low"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_allow_documents_managed_sources_unmanaged_destinations_disable.yaml
+++ b/rules/os/os_allow_documents_managed_sources_unmanaged_destinations_disable.yaml
@@ -41,7 +41,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_apple_watch_pairing_disable.yaml
+++ b/rules/os/os_apple_watch_pairing_disable.yaml
@@ -31,7 +31,7 @@ iOS:
  - '16.0'
 tags:
  - ios
-  - stig
+  - ios_stig
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
--- a/rules/os/os_apple_watch_wrist_detection_enable.yaml
+++ b/rules/os/os_apple_watch_wrist_detection_enable.yaml
@@ -38,7 +38,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "low"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_application_allow_list.yaml
+++ b/rules/os/os_application_allow_list.yaml
@@ -36,7 +36,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
  - manual
 severity: medium
 supervised: true
--- a/rules/os/os_auto_unlock_disable.yaml
+++ b/rules/os/os_auto_unlock_disable.yaml
@@ -31,7 +31,7 @@ tags:
  - ios
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 supervised: false
 mobileconfig: true
--- a/rules/os/os_diagnostics_reports_disable.yaml
+++ b/rules/os/os_diagnostics_reports_disable.yaml
@@ -40,7 +40,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_enterprise_books_disable.yaml
+++ b/rules/os/os_enterprise_books_disable.yaml
@@ -27,7 +27,7 @@ iOS:
  - '16.0'
 tags:
  - ios
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_erase_on_mdm_unenroll.yaml
+++ b/rules/os/os_erase_on_mdm_unenroll.yaml
@@ -32,7 +32,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
  - inherent
 severity: medium
 supervised:
--- a/rules/os/os_files_usb_drive_access_disable.yaml
+++ b/rules/os/os_files_usb_drive_access_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_high
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_find_my_friends_disable.yaml
+++ b/rules/os/os_find_my_friends_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: low
 supervised: true
 mobileconfig: true
--- a/rules/os/os_force_encrypted_backups_enable.yaml
+++ b/rules/os/os_force_encrypted_backups_enable.yaml
@@ -41,7 +41,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_handoff_disable.yaml
+++ b/rules/os/os_handoff_disable.yaml
@@ -41,7 +41,7 @@ tags:
  - cis_lvl2_byod
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "low"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_install_vpn_configuration_disable.yaml
+++ b/rules/os/os_install_vpn_configuration_disable.yaml
@@ -39,7 +39,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "low"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_limit_ad_tracking_enable.yaml
+++ b/rules/os/os_limit_ad_tracking_enable.yaml
@@ -36,7 +36,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
  - cisv8
 severity: low
 supervised: false
--- a/rules/os/os_mail_maildrop_disable.yaml
+++ b/rules/os/os_mail_maildrop_disable.yaml
@@ -40,7 +40,7 @@ tags:
  - cis_lvl2_byod
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_mail_move_messages_disable.yaml
+++ b/rules/os/os_mail_move_messages_disable.yaml
@@ -42,7 +42,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_new_device_proximity_disable.yaml
+++ b/rules/os/os_new_device_proximity_disable.yaml
@@ -37,7 +37,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_on_device_dictation_enforce.yaml
+++ b/rules/os/os_on_device_dictation_enforce.yaml
@@ -35,7 +35,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 supervised: false
 mobileconfig: true
--- a/rules/os/os_on_device_translation_enforce.yaml
+++ b/rules/os/os_on_device_translation_enforce.yaml
@@ -32,7 +32,7 @@ iOS:
  - '16.0'
 tags:
  - ios
-  - stig
+  - ios_stig
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
--- a/rules/os/os_password_autofill_disable.yaml
+++ b/rules/os/os_password_autofill_disable.yaml
@@ -37,7 +37,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 supervised: true
 mobileconfig: true
--- a/rules/os/os_password_proximity_disable.yaml
+++ b/rules/os/os_password_proximity_disable.yaml
@@ -37,7 +37,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_password_sharing_disable.yaml
+++ b/rules/os/os_password_sharing_disable.yaml
@@ -33,7 +33,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 supervised: true
 mobileconfig: true
--- a/rules/os/os_require_managed_pasteboard_enforce.yaml
+++ b/rules/os/os_require_managed_pasteboard_enforce.yaml
@@ -31,7 +31,7 @@ iOS:
  - '16.0'
 tags:
  - ios
-  - stig
+  - ios_stig
 severity: medium
 supervised: false
 mobileconfig: true
--- a/rules/os/os_safari_password_autofill_disable.yaml
+++ b/rules/os/os_safari_password_autofill_disable.yaml
@@ -38,7 +38,7 @@ tags:
  - 800-53r5_moderate
  - 800-53r5_high
  - cisv8
-  - stig
+  - ios_stig
 severity: "low"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_share_location_data_disable.yaml
+++ b/rules/os/os_share_location_data_disable.yaml
@@ -29,7 +29,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
  - manual
 severity: medium
 supervised: false
--- a/rules/os/os_show_calendar_lock_screen_disable.yaml
+++ b/rules/os/os_show_calendar_lock_screen_disable.yaml
@@ -28,7 +28,7 @@ tags:
  - ios
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 supervised: false
 mobileconfig: true
--- a/rules/os/os_show_notification_center_lock_screen_disable.yaml
+++ b/rules/os/os_show_notification_center_lock_screen_disable.yaml
@@ -35,7 +35,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_siri_when_locked_disabled.yaml
+++ b/rules/os/os_siri_when_locked_disabled.yaml
@@ -39,7 +39,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/os/os_ssl_for_exchange_activesync_enable.yaml
+++ b/rules/os/os_ssl_for_exchange_activesync_enable.yaml
@@ -26,7 +26,7 @@ iOS:
  - "16.0"
 tags:
  - ios
-  - stig
+  - ios_stig
 severity: medium
 supervised: false
 mobileconfig: true
--- a/rules/os/os_supervised_mdm_require.yaml
+++ b/rules/os/os_supervised_mdm_require.yaml
@@ -32,7 +32,7 @@ tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
-  - stig
+  - ios_stig
 severity: medium
 mobileconfig: 'true'
 mobileconfig_info:
--- a/rules/os/os_usb_accessories_when_locked_disable.yaml
+++ b/rules/os/os_usb_accessories_when_locked_disable.yaml
@@ -38,7 +38,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: true
 mobileconfig: true
--- a/rules/os/os_voice_dialing_when_locked_disabled.yaml
+++ b/rules/os/os_voice_dialing_when_locked_disabled.yaml
@@ -37,7 +37,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/pwpolicy/pwpolicy_account_lockout_enforce.yaml
+++ b/rules/pwpolicy/pwpolicy_account_lockout_enforce.yaml
@@ -34,7 +34,7 @@ odv:
  recommended: 6
  cis_lvl1: 6
  cis_lvl2: 6
-  stig: 10
+  ios_stig: 10
 tags:
  - ios
  - 800-53r5_low
@@ -45,7 +45,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/pwpolicy/pwpolicy_force_pin_enable.yaml
+++ b/rules/pwpolicy/pwpolicy_force_pin_enable.yaml
@@ -28,7 +28,7 @@ iOS:
  - "16.0"
 tags:
  - ios
-  - stig
+  - ios_stig
 severity: high
 mobileconfig: 'true'
 mobileconfig_info:
--- a/rules/pwpolicy/pwpolicy_max_grace_period_enforce.yaml
+++ b/rules/pwpolicy/pwpolicy_max_grace_period_enforce.yaml
@@ -32,7 +32,7 @@ odv:
  recommended: 0
  cis_lvl1: 0
  cis_lvl2: 0
-  stig: 5
+  ios_stig: 5
 tags:
  - ios
  - 800-53r5_low
@@ -43,7 +43,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/pwpolicy/pwpolicy_max_inactivity_enforce.yaml
+++ b/rules/pwpolicy/pwpolicy_max_inactivity_enforce.yaml
@@ -32,7 +32,7 @@ odv:
  recommended: 2
  cis_lvl1: 2
  cis_lvl2: 2
-  stig: 5
+  ios_stig: 5
 tags:
  - ios
  - 800-53r5_low
@@ -43,7 +43,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/pwpolicy/pwpolicy_minimum_length_enforce.yaml
+++ b/rules/pwpolicy/pwpolicy_minimum_length_enforce.yaml
@@ -33,7 +33,7 @@ odv:
  recommended: 6
  cis_lvl1: 6
  cis_lvl2: 6
-  stig: 6
+  ios_stig: 6
 tags:
  - ios
  - 800-53r5_low
@@ -44,7 +44,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/pwpolicy/pwpolicy_simple_sequence_disable.yaml
+++ b/rules/pwpolicy/pwpolicy_simple_sequence_disable.yaml
@@ -38,7 +38,7 @@ tags:
  - cis_lvl1_enterprise
  - cis_lvl2_enterprise
  - cisv8
-  - stig
+  - ios_stig
 severity: "medium"
 supervised: false
 mobileconfig: true
--- a/rules/supplemental/supplemental_stig.yaml
+++ b/rules/supplemental/supplemental_stig.yaml
@@ -37,7 +37,7 @@ references:
 iOS:
  - "13.0"
 tags:
-  - stig
+  - ios_stig
  - supplemental
 mobileconfig: false
 mobileconfig_info: