diff --git a/CHANGELOG.adoc b/CHANGELOG.adoc index 8400145a..9f71cc28 100644 --- a/CHANGELOG.adoc +++ b/CHANGELOG.adoc @@ -2,7 +2,7 @@ This document provides a high-level view of the changes to the macOS Security Compliance Project. -== [Big Sur, Revision 3] - 2021-07-22 +== [Big Sur, Revision 3] - 2021-07-26 * Rules ** Added Rules diff --git a/SCAP/html-to-xccdf.xsl b/SCAP/html-to-xccdf.xsl index 4532697f..3cb2f899 100644 --- a/SCAP/html-to-xccdf.xsl +++ b/SCAP/html-to-xccdf.xsl @@ -474,7 +474,7 @@ - https://nvd.nist.gov/800-53/Rev4/control/ + https://nvd.nist.gov/800-53/Rev5/control/ @@ -487,7 +487,7 @@ - NIST SP 800-53r4 + NIST SP 800-53r5 diff --git a/VERSION.yaml b/VERSION.yaml index 0fbdb06a..7b1c5402 100644 --- a/VERSION.yaml +++ b/VERSION.yaml @@ -1,3 +1,3 @@ os: "11.0" version: "Big Sur, Revision 3" -date: "2021-07-22" +date: "2021-07-26" diff --git a/rules/auth/auth_smartcard_enforce.yaml b/rules/auth/auth_smartcard_enforce.yaml index 5dee57dc..591aeb14 100644 --- a/rules/auth/auth_smartcard_enforce.yaml +++ b/rules/auth/auth_smartcard_enforce.yaml @@ -7,7 +7,7 @@ discussion: | When enforceSmartCard is set to “true”, the smartcard must be used for login, authorization, and unlocking the screensaver. - CAUTION: enforceSmartCard will apply to the whole system. No users will be able to login with their password unless the profile is removed or a member of the NotEnforced group. + CAUTION: enforceSmartCard will apply to the whole system. No users will be able to login with their password unless the profile is removed or a user is exempt from smartcard enforcement. NOTE: enforceSmartcard requires allowSmartcard to be set to true in order to work. check: |