usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-01 16:02:55 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

refactor[rules/baselines]cis updates

Browse Source 
Added cis_lvl2,cisv8 to additional audit rules
Updated cisv8 baseline and cis_lvl2 baseline
This commit is contained in:
Bob Gendler
2022-09-22 14:29:40 -04:00
parent 66c0372215
commit e4ab4945ec
8 changed files with 68 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
baselines/cis_lvl2.yaml
View File

@@ -22,7 +22,13 @@ profile:
- audit_files_group_configure
- audit_files_mode_configure
- audit_files_owner_configure
- audit_flags_configure
- audit_flags_aa_configure
- audit_flags_ad_configure
- audit_flags_ex_configure
- audit_flags_fm_failed_configure
- audit_flags_fr_configure
- audit_flags_fw_configure
- audit_flags_lo_configure
- audit_folder_group_configure
- audit_folder_owner_configure
- audit_folders_mode_configure

8
baselines/cisv8.yaml
View File

@@ -23,7 +23,13 @@ profile:
- audit_files_group_configure
- audit_files_mode_configure
- audit_files_owner_configure
- audit_flags_configure
- audit_flags_aa_configure
- audit_flags_ad_configure
- audit_flags_ex_configure
- audit_flags_fm_failed_configure
- audit_flags_fr_configure
- audit_flags_fw_configure
- audit_flags_lo_configure
- audit_folder_group_configure
- audit_folder_owner_configure
- audit_folders_mode_configure

9
rules/audit/audit_flags_aa_configure.yaml
View File

@@ -40,6 +40,13 @@ references:
800-171r2:
- 3.3.1
- 3.3.2
cis:
benchmark:
- 3.2 (level 2)
controls v8:
- 3.14
- 8.2
- 8.5
macOS:
- "13.0"
tags:
@@ -53,6 +60,8 @@ tags:
- 800-171
- cnssi-1253
- stig
- cis_lvl2
- cisv8
severity: "medium"
mobileconfig: false
mobileconfig_info:

9
rules/audit/audit_flags_ad_configure.yaml
View File

@@ -61,6 +61,13 @@ references:
- 3.1.7
- 3.3.1
- 3.3.2
cis:
benchmark:
- 3.2 (level 2)
controls v8:
- 3.14
- 8.2
- 8.5
macOS:
- "13.0"
tags:
@@ -74,6 +81,8 @@ tags:
- 800-171
- cnssi-1253
- stig
- cis_lvl2
- cisv8
severity: "medium"
mobileconfig: false
mobileconfig_info:

9
rules/audit/audit_flags_ex_configure.yaml
View File

@@ -37,6 +37,13 @@ references:
800-171r2:
- 3.3.1
- 3.3.2
cis:
benchmark:
- 3.2 (level 2)
controls v8:
- 3.14
- 8.2
- 8.5
macOS:
- "13.0"
tags:
@@ -49,5 +56,7 @@ tags:
- 800-53r5_high
- 800-171
- cnssi-1253
- cis_lvl2
- cisv8
mobileconfig: false
mobileconfig_info:

9
rules/audit/audit_flags_fr_configure.yaml
View File

@@ -53,6 +53,13 @@ references:
- 3.3.1
- 3.3.2
- 3.3.8
cis:
benchmark:
- 3.2 (level 2)
controls v8:
- 3.14
- 8.2
- 8.5
macOS:
- "13.0"
tags:
@@ -66,6 +73,8 @@ tags:
- 800-171
- cnssi-1253
- stig
- cis_lvl2
- cisv8
severity: "medium"
mobileconfig: false
mobileconfig_info:

9
rules/audit/audit_flags_fw_configure.yaml
View File

@@ -52,6 +52,13 @@ references:
- 3.3.1
- 3.3.2
- 3.3.8
cis:
benchmark:
- 3.2 (level 2)
controls v8:
- 3.14
- 8.2
- 8.5
macOS:
- "13.0"
tags:
@@ -65,6 +72,8 @@ tags:
- 800-171
- cnssi-1253
- stig
- cis_lvl2
- cisv8
severity: "medium"
mobileconfig: false
mobileconfig_info:

9
rules/audit/audit_flags_lo_configure.yaml
View File

@@ -41,6 +41,13 @@ references:
- 3.1.12
- 3.3.1
- 3.3.2
cis:
benchmark:
- 3.2 (level 2)
controls v8:
- 3.14
- 8.2
- 8.5
macOS:
- "13.0"
tags:
@@ -54,6 +61,8 @@ tags:
- 800-171
- cnssi-1253
- stig
- cis_lvl2
- cisv8
severity: "medium"
mobileconfig: false
mobileconfig_info: