diff --git a/src/mscp/data/rules/audit/audit_acls_files_configure.yaml b/src/mscp/data/rules/audit/audit_acls_files_configure.yaml index 97d3e950..a86aaf5d 100644 --- a/src/mscp/data/rules/audit/audit_acls_files_configure.yaml +++ b/src/mscp/data/rules/audit/audit_acls_files_configure.yaml @@ -58,12 +58,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_acls_folders_configure.yaml b/src/mscp/data/rules/audit/audit_acls_folders_configure.yaml index 59148aeb..cb41c97b 100644 --- a/src/mscp/data/rules/audit/audit_acls_folders_configure.yaml +++ b/src/mscp/data/rules/audit/audit_acls_folders_configure.yaml @@ -35,7 +35,7 @@ references: - SRG-OS-000257-GPOS-00098 - SRG-OS-000258-GPOS-00099 - SRG-OS-000058-GPOS-00028 - disa_stig: + disa_stig: macos_27: - APPL-27-000031 macos_26: @@ -58,12 +58,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_auditd_enabled.yaml b/src/mscp/data/rules/audit/audit_auditd_enabled.yaml index 6e766489..5a811f5f 100644 --- a/src/mscp/data/rules/audit/audit_auditd_enabled.yaml +++ b/src/mscp/data/rules/audit/audit_auditd_enabled.yaml @@ -115,6 +115,8 @@ references: - 3.1 (level 1) macos_14: - 3.1 (level 1) + macos_27: + - 3.1 (level 1) controls_v8: - 8.2 - 8.5 @@ -122,6 +124,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_control_acls_configure.yaml b/src/mscp/data/rules/audit/audit_control_acls_configure.yaml index d8e85f6e..e4488c4f 100644 --- a/src/mscp/data/rules/audit/audit_control_acls_configure.yaml +++ b/src/mscp/data/rules/audit/audit_control_acls_configure.yaml @@ -57,12 +57,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_control_group_configure.yaml b/src/mscp/data/rules/audit/audit_control_group_configure.yaml index bc011c45..5ce51334 100644 --- a/src/mscp/data/rules/audit/audit_control_group_configure.yaml +++ b/src/mscp/data/rules/audit/audit_control_group_configure.yaml @@ -57,12 +57,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_control_mode_configure.yaml b/src/mscp/data/rules/audit/audit_control_mode_configure.yaml index 54b26e44..c259d7b3 100644 --- a/src/mscp/data/rules/audit/audit_control_mode_configure.yaml +++ b/src/mscp/data/rules/audit/audit_control_mode_configure.yaml @@ -57,12 +57,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_control_owner_configure.yaml b/src/mscp/data/rules/audit/audit_control_owner_configure.yaml index 1daef005..89ddfe10 100644 --- a/src/mscp/data/rules/audit/audit_control_owner_configure.yaml +++ b/src/mscp/data/rules/audit/audit_control_owner_configure.yaml @@ -57,12 +57,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_files_group_configure.yaml b/src/mscp/data/rules/audit/audit_files_group_configure.yaml index cb27b95d..f4fa9a0c 100644 --- a/src/mscp/data/rules/audit/audit_files_group_configure.yaml +++ b/src/mscp/data/rules/audit/audit_files_group_configure.yaml @@ -59,12 +59,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_files_mode_configure.yaml b/src/mscp/data/rules/audit/audit_files_mode_configure.yaml index c1841f9d..b5278a17 100644 --- a/src/mscp/data/rules/audit/audit_files_mode_configure.yaml +++ b/src/mscp/data/rules/audit/audit_files_mode_configure.yaml @@ -55,12 +55,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_files_owner_configure.yaml b/src/mscp/data/rules/audit/audit_files_owner_configure.yaml index ccf3f159..f424e932 100644 --- a/src/mscp/data/rules/audit/audit_files_owner_configure.yaml +++ b/src/mscp/data/rules/audit/audit_files_owner_configure.yaml @@ -59,12 +59,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_flags_aa_configure.yaml b/src/mscp/data/rules/audit/audit_flags_aa_configure.yaml index 2b566968..31b076ff 100644 --- a/src/mscp/data/rules/audit/audit_flags_aa_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_aa_configure.yaml @@ -71,6 +71,8 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 @@ -79,6 +81,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_flags_ad_configure.yaml b/src/mscp/data/rules/audit/audit_flags_ad_configure.yaml index f89ce098..6416ccb8 100644 --- a/src/mscp/data/rules/audit/audit_flags_ad_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_ad_configure.yaml @@ -92,6 +92,8 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 @@ -100,6 +102,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_flags_ex_configure.yaml b/src/mscp/data/rules/audit/audit_flags_ex_configure.yaml index 0e202c54..8589e6e3 100644 --- a/src/mscp/data/rules/audit/audit_flags_ex_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_ex_configure.yaml @@ -61,6 +61,8 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 @@ -69,6 +71,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_flags_fm_failed_configure.yaml b/src/mscp/data/rules/audit/audit_flags_fm_failed_configure.yaml index c232282e..542a7f45 100644 --- a/src/mscp/data/rules/audit/audit_flags_fm_failed_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_fm_failed_configure.yaml @@ -48,13 +48,17 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 - 8.5 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl2 diff --git a/src/mscp/data/rules/audit/audit_flags_fr_configure.yaml b/src/mscp/data/rules/audit/audit_flags_fr_configure.yaml index d37ebffc..c43dd512 100644 --- a/src/mscp/data/rules/audit/audit_flags_fr_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_fr_configure.yaml @@ -76,6 +76,8 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 @@ -84,6 +86,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_flags_fw_configure.yaml b/src/mscp/data/rules/audit/audit_flags_fw_configure.yaml index 0d04f14a..51b73a7b 100644 --- a/src/mscp/data/rules/audit/audit_flags_fw_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_fw_configure.yaml @@ -77,6 +77,8 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 @@ -85,6 +87,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_flags_lo_configure.yaml b/src/mscp/data/rules/audit/audit_flags_lo_configure.yaml index 7a7808db..4bbd4dfc 100644 --- a/src/mscp/data/rules/audit/audit_flags_lo_configure.yaml +++ b/src/mscp/data/rules/audit/audit_flags_lo_configure.yaml @@ -68,6 +68,8 @@ references: - 3.2 (level 2) macos_14: - 3.2 (level 2) + macos_27: + - 3.2 (level 2) controls_v8: - 3.14 - 8.2 @@ -76,6 +78,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_folder_group_configure.yaml b/src/mscp/data/rules/audit/audit_folder_group_configure.yaml index 40ddd4a1..f01ccbfb 100644 --- a/src/mscp/data/rules/audit/audit_folder_group_configure.yaml +++ b/src/mscp/data/rules/audit/audit_folder_group_configure.yaml @@ -59,12 +59,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_folder_owner_configure.yaml b/src/mscp/data/rules/audit/audit_folder_owner_configure.yaml index 7bfe23b6..0f668bf9 100644 --- a/src/mscp/data/rules/audit/audit_folder_owner_configure.yaml +++ b/src/mscp/data/rules/audit/audit_folder_owner_configure.yaml @@ -59,12 +59,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_folders_mode_configure.yaml b/src/mscp/data/rules/audit/audit_folders_mode_configure.yaml index 06472551..33d8c3c5 100644 --- a/src/mscp/data/rules/audit/audit_folders_mode_configure.yaml +++ b/src/mscp/data/rules/audit/audit_folders_mode_configure.yaml @@ -57,12 +57,16 @@ references: - 3.5 (level 1) macos_14: - 3.5 (level 1) + macos_27: + - 3.5 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/audit/audit_retention_configure.yaml b/src/mscp/data/rules/audit/audit_retention_configure.yaml index 8250974b..6b495ef4 100644 --- a/src/mscp/data/rules/audit/audit_retention_configure.yaml +++ b/src/mscp/data/rules/audit/audit_retention_configure.yaml @@ -48,6 +48,8 @@ references: - 3.4 (level 1) macos_14: - 3.4 (level 1) + macos_27: + - 3.4 (level 1) controls_v8: - 8.1 - 8.3 @@ -55,6 +57,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: low '26.0': diff --git a/src/mscp/data/rules/auth/auth_smartcard_allow.yaml b/src/mscp/data/rules/auth/auth_smartcard_allow.yaml index 39dad5a5..162c0778 100644 --- a/src/mscp/data/rules/auth/auth_smartcard_allow.yaml +++ b/src/mscp/data/rules/auth/auth_smartcard_allow.yaml @@ -56,7 +56,6 @@ references: hhs: hicp: - 3.L.A - - '' cis: controls_v8: - 6.3 diff --git a/src/mscp/data/rules/auth/auth_smartcard_enforce.yaml b/src/mscp/data/rules/auth/auth_smartcard_enforce.yaml index d17ea579..44a7621a 100644 --- a/src/mscp/data/rules/auth/auth_smartcard_enforce.yaml +++ b/src/mscp/data/rules/auth/auth_smartcard_enforce.yaml @@ -71,7 +71,6 @@ references: hhs: hicp: - 3.L.A - - '' cis: controls_v8: - 6.3 diff --git a/src/mscp/data/rules/icloud/icloud_sync_disable.yaml b/src/mscp/data/rules/icloud/icloud_sync_disable.yaml index dc14f61c..0792e491 100644 --- a/src/mscp/data/rules/icloud/icloud_sync_disable.yaml +++ b/src/mscp/data/rules/icloud/icloud_sync_disable.yaml @@ -61,6 +61,8 @@ references: - 2.1.1.3 (level 2) macos_14: - 2.1.1.3 (level 2) + macos_27: + - 2.1.1.3 (level 2) controls_v8: - 4.1 - 4.8 @@ -69,6 +71,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_airdrop_disable.yaml b/src/mscp/data/rules/os/os_airdrop_disable.yaml index 042401ca..e444d19e 100644 --- a/src/mscp/data/rules/os/os_airdrop_disable.yaml +++ b/src/mscp/data/rules/os/os_airdrop_disable.yaml @@ -82,6 +82,8 @@ references: - 2.3.1.1 (level 1) macos_14: - 2.3.1.1 (level 1) + macos_27: + - 2.3.1.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -98,6 +100,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_anti_virus_installed.yaml b/src/mscp/data/rules/os/os_anti_virus_installed.yaml index 86c48932..b987a524 100644 --- a/src/mscp/data/rules/os/os_anti_virus_installed.yaml +++ b/src/mscp/data/rules/os/os_anti_virus_installed.yaml @@ -34,13 +34,18 @@ references: - 5.10 (level 1) macos_14: - 5.10 (level 1) + macos_27: + - 5.10 (level 1) controls_v8: - 10.5 - 10.1 - 10.2 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_authenticated_root_enable.yaml b/src/mscp/data/rules/os/os_authenticated_root_enable.yaml index 4abb0f93..12b390d7 100644 --- a/src/mscp/data/rules/os/os_authenticated_root_enable.yaml +++ b/src/mscp/data/rules/os/os_authenticated_root_enable.yaml @@ -65,6 +65,8 @@ references: - 5.1.4 (level 1) macos_14: - 5.1.4 (level 1) + macos_27: + - 5.1.4 (level 1) controls_v8: - 3.6 - 3.11 @@ -72,6 +74,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_bonjour_disable.yaml b/src/mscp/data/rules/os/os_bonjour_disable.yaml index 3935d9e8..e48d083d 100644 --- a/src/mscp/data/rules/os/os_bonjour_disable.yaml +++ b/src/mscp/data/rules/os/os_bonjour_disable.yaml @@ -47,6 +47,8 @@ references: - 4.1 (level 2) macos_14: - 4.1 (level 2) + macos_27: + - 4.1 (level 2) controls_v8: - 4.1 - 4.8 @@ -54,6 +56,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_config_data_install_enforce.yaml b/src/mscp/data/rules/os/os_config_data_install_enforce.yaml index 46cb1387..1592a920 100644 --- a/src/mscp/data/rules/os/os_config_data_install_enforce.yaml +++ b/src/mscp/data/rules/os/os_config_data_install_enforce.yaml @@ -53,6 +53,8 @@ references: - 1.6 (level 1) macos_14: - 1.6 (level 1) + macos_27: + - 1.5 (level 1) controls_v8: - 7.3 - 7.4 @@ -65,6 +67,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_dictation_disable.yaml b/src/mscp/data/rules/os/os_dictation_disable.yaml index fe9baf3e..6bf6bbc1 100644 --- a/src/mscp/data/rules/os/os_dictation_disable.yaml +++ b/src/mscp/data/rules/os/os_dictation_disable.yaml @@ -57,7 +57,6 @@ references: hhs: hicp: - 2.L.A - - '' cis: controls_v8: - 4.1 diff --git a/src/mscp/data/rules/os/os_external_apfs_hfs_volumes_encrypted.yaml b/src/mscp/data/rules/os/os_external_apfs_hfs_volumes_encrypted.yaml index 9e810f89..61d00d62 100644 --- a/src/mscp/data/rules/os/os_external_apfs_hfs_volumes_encrypted.yaml +++ b/src/mscp/data/rules/os/os_external_apfs_hfs_volumes_encrypted.yaml @@ -15,14 +15,18 @@ references: benchmark: macos_26: - 5.3.2 (level 1) + macos_27: + - 5.3.2 (level 1) controls_v8: - 3.6 - 3.11 - - 13.6 - 14.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_firewall_default_deny_require.yaml b/src/mscp/data/rules/os/os_firewall_default_deny_require.yaml index 59e69f6d..d61b7d26 100644 --- a/src/mscp/data/rules/os/os_firewall_default_deny_require.yaml +++ b/src/mscp/data/rules/os/os_firewall_default_deny_require.yaml @@ -37,7 +37,6 @@ references: hhs: hicp: - 6.L.A - - '' platforms: macOS: '27.0': {} diff --git a/src/mscp/data/rules/os/os_gatekeeper_enable.yaml b/src/mscp/data/rules/os/os_gatekeeper_enable.yaml index 1e1bdeb8..c64b35c1 100644 --- a/src/mscp/data/rules/os/os_gatekeeper_enable.yaml +++ b/src/mscp/data/rules/os/os_gatekeeper_enable.yaml @@ -65,6 +65,8 @@ references: - 2.6.5 (level 1) macos_14: - 2.6.5 (level 1) + macos_27: + - 2.6.5 (level 1) controls_v8: - 10.1 - 10.2 @@ -73,6 +75,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: high '26.0': diff --git a/src/mscp/data/rules/os/os_guest_folder_removed.yaml b/src/mscp/data/rules/os/os_guest_folder_removed.yaml index b389e00b..2ca52f0f 100644 --- a/src/mscp/data/rules/os/os_guest_folder_removed.yaml +++ b/src/mscp/data/rules/os/os_guest_folder_removed.yaml @@ -21,11 +21,16 @@ references: - 5.9 (level 1) macos_14: - 5.9 (level 1) + macos_27: + - 5.9 (level 1) controls_v8: - 4.1 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_home_folders_secure.yaml b/src/mscp/data/rules/os/os_home_folders_secure.yaml index 36567377..9fd08bc6 100644 --- a/src/mscp/data/rules/os/os_home_folders_secure.yaml +++ b/src/mscp/data/rules/os/os_home_folders_secure.yaml @@ -55,12 +55,16 @@ references: - 5.1.1 (level 1) macos_14: - 5.1.1 (level 1) + macos_27: + - 5.1.1 (level 1) controls_v8: - 3.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_httpd_disable.yaml b/src/mscp/data/rules/os/os_httpd_disable.yaml index 19ffc009..1262c1c0 100644 --- a/src/mscp/data/rules/os/os_httpd_disable.yaml +++ b/src/mscp/data/rules/os/os_httpd_disable.yaml @@ -52,6 +52,8 @@ references: - 4.2 (level 1) macos_14: - 4.2 (level 1) + macos_27: + - 4.2 (level 1) controls_v8: - 4.1 - 4.8 @@ -59,6 +61,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_install_configuration_profile_disable.yaml b/src/mscp/data/rules/os/os_install_configuration_profile_disable.yaml index a261e8c7..0d5fbb53 100644 --- a/src/mscp/data/rules/os/os_install_configuration_profile_disable.yaml +++ b/src/mscp/data/rules/os/os_install_configuration_profile_disable.yaml @@ -58,6 +58,10 @@ references: - 8.27 cis: benchmark: + macos_27: + - 2.3.5.1 (level 2) + macos_26: + - 2.3.5.1 (level 2) ios_26: - 3.2.1.15 (level 1 - Institutionally-Owned Devices) ios_18: @@ -68,8 +72,12 @@ references: - 4.1 platforms: macOS: - '27.0': {} - '26.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 + '26.0': + benchmarks: + - name: cis_lvl2 '15.0': {} enforcement_info: check: diff --git a/src/mscp/data/rules/os/os_install_log_retention_configure.yaml b/src/mscp/data/rules/os/os_install_log_retention_configure.yaml index 34477a20..fd4eac7d 100644 --- a/src/mscp/data/rules/os/os_install_log_retention_configure.yaml +++ b/src/mscp/data/rules/os/os_install_log_retention_configure.yaml @@ -46,6 +46,8 @@ references: - 3.3 (level 1) macos_14: - 3.3 (level 1) + macos_27: + - 3.3 (level 1) controls_v8: - 8.1 - 8.3 @@ -53,6 +55,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_internal_apfs_volumes_encrypted.yaml b/src/mscp/data/rules/os/os_internal_apfs_volumes_encrypted.yaml index d0a311f8..05a41d12 100644 --- a/src/mscp/data/rules/os/os_internal_apfs_volumes_encrypted.yaml +++ b/src/mscp/data/rules/os/os_internal_apfs_volumes_encrypted.yaml @@ -15,14 +15,17 @@ references: benchmark: macos_26: - 5.3.1 (level 1) + macos_27: + - 5.3.1 (level 1) controls_v8: - 3.6 - 3.11 - - 13.6 - - 14.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_mail_summary_disable.yaml b/src/mscp/data/rules/os/os_mail_summary_disable.yaml index 53415c0f..7193b3fd 100644 --- a/src/mscp/data/rules/os/os_mail_summary_disable.yaml +++ b/src/mscp/data/rules/os/os_mail_summary_disable.yaml @@ -49,6 +49,8 @@ references: ios_26: - 2.9.3 (level 1 - End-User Owned Devices) - 3.10.3 (level 1 - Institutionally-Owned Devices) + macos_27: + - 2.5.1.3 (level 1) bsi: indigo: ios_26: @@ -57,7 +59,10 @@ references: - ANNEX K platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_mobile_file_integrity_enable.yaml b/src/mscp/data/rules/os/os_mobile_file_integrity_enable.yaml index 14b3e290..e875cf07 100644 --- a/src/mscp/data/rules/os/os_mobile_file_integrity_enable.yaml +++ b/src/mscp/data/rules/os/os_mobile_file_integrity_enable.yaml @@ -20,12 +20,17 @@ references: - 5.1.3 (level 1) macos_14: - 5.1.3 (level 1) + macos_27: + - 5.1.3 (level 1) controls_v8: - 2.3 - 2.6 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_nfsd_disable.yaml b/src/mscp/data/rules/os/os_nfsd_disable.yaml index 6d609862..b393553c 100644 --- a/src/mscp/data/rules/os/os_nfsd_disable.yaml +++ b/src/mscp/data/rules/os/os_nfsd_disable.yaml @@ -51,6 +51,8 @@ references: - 4.3 (level 1) macos_14: - 4.3 (level 1) + macos_27: + - 4.3 (level 1) controls_v8: - 4.1 - 4.8 @@ -58,6 +60,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_notes_transcription_disable.yaml b/src/mscp/data/rules/os/os_notes_transcription_disable.yaml index d6107072..d05d8360 100644 --- a/src/mscp/data/rules/os/os_notes_transcription_disable.yaml +++ b/src/mscp/data/rules/os/os_notes_transcription_disable.yaml @@ -46,13 +46,18 @@ references: - 2.5.1.4 (level 1) macos_15: - 2.5.1.4 (level 1) + macos_27: + - 2.5.1.4 (level 1) bsi: indigo: ios_26: - ANNEX K platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_notes_transcription_summary_disable.yaml b/src/mscp/data/rules/os/os_notes_transcription_summary_disable.yaml index f80fabe7..acb17599 100644 --- a/src/mscp/data/rules/os/os_notes_transcription_summary_disable.yaml +++ b/src/mscp/data/rules/os/os_notes_transcription_summary_disable.yaml @@ -49,13 +49,18 @@ references: ios_26: - 2.9.2 (level 1 - End-User Owned Devices) - 3.10.2 (level 1 - Institutionally-Owned Devices) + macos_27: + - 2.5.1.4 (level 1) bsi: indigo: ios_26: - ANNEX K platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_obscure_password.yaml b/src/mscp/data/rules/os/os_obscure_password.yaml index 1fb5481f..f373f629 100644 --- a/src/mscp/data/rules/os/os_obscure_password.yaml +++ b/src/mscp/data/rules/os/os_obscure_password.yaml @@ -35,7 +35,6 @@ references: hicp: - 2.L.B - 3.L.B - - '' cis: controls_v8: - 4.1 diff --git a/src/mscp/data/rules/os/os_on_device_dictation_enforce.yaml b/src/mscp/data/rules/os/os_on_device_dictation_enforce.yaml index 965e2d75..a8fdf788 100644 --- a/src/mscp/data/rules/os/os_on_device_dictation_enforce.yaml +++ b/src/mscp/data/rules/os/os_on_device_dictation_enforce.yaml @@ -77,6 +77,8 @@ references: - 2.18.1 (level 1) macos_14: - 2.18.1 (level 1) + macos_27: + - 2.18.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -92,6 +94,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': @@ -148,7 +152,7 @@ platforms: introduced: '14.5' visionOS: '27.0': - supervised: false + supervised: false '26.0': supervised: false benchmarks: diff --git a/src/mscp/data/rules/os/os_password_hint_remove.yaml b/src/mscp/data/rules/os/os_password_hint_remove.yaml index 5f69aef0..49ae7a10 100644 --- a/src/mscp/data/rules/os/os_password_hint_remove.yaml +++ b/src/mscp/data/rules/os/os_password_hint_remove.yaml @@ -45,12 +45,16 @@ references: - 2.12.1 (level 1) macos_14: - 2.11.1 (level 1) + macos_27: + - 2.12.1 (level 1) controls_v8: - 5.2 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_policy_banner_loginwindow_enforce.yaml b/src/mscp/data/rules/os/os_policy_banner_loginwindow_enforce.yaml index 4d933716..07f2da10 100644 --- a/src/mscp/data/rules/os/os_policy_banner_loginwindow_enforce.yaml +++ b/src/mscp/data/rules/os/os_policy_banner_loginwindow_enforce.yaml @@ -60,12 +60,15 @@ references: - 5.8 (level 2) macos_14: - 5.8 (level 2) + macos_27: + - 5.8 (level 2) controls_v8: - 4.1 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_root_disable.yaml b/src/mscp/data/rules/os/os_root_disable.yaml index 54348878..a4643a18 100644 --- a/src/mscp/data/rules/os/os_root_disable.yaml +++ b/src/mscp/data/rules/os/os_root_disable.yaml @@ -54,12 +54,16 @@ references: - 5.6 (level 1) macos_14: - 5.6 (level 1) + macos_27: + - 5.6 (level 1) controls_v8: - 5.4 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_safari_advertising_privacy_protection_enable.yaml b/src/mscp/data/rules/os/os_safari_advertising_privacy_protection_enable.yaml index 9bb9187b..02c24a82 100644 --- a/src/mscp/data/rules/os/os_safari_advertising_privacy_protection_enable.yaml +++ b/src/mscp/data/rules/os/os_safari_advertising_privacy_protection_enable.yaml @@ -25,11 +25,16 @@ references: - 6.3.6 (level 1) macos_14: - 6.3.6 (level 1) + macos_27: + - 6.3.6 (level 1) controls_v8: - 9.1 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_safari_open_safe_downloads_disable.yaml b/src/mscp/data/rules/os/os_safari_open_safe_downloads_disable.yaml index 60667601..42b5e7f8 100644 --- a/src/mscp/data/rules/os/os_safari_open_safe_downloads_disable.yaml +++ b/src/mscp/data/rules/os/os_safari_open_safe_downloads_disable.yaml @@ -25,12 +25,17 @@ references: - 6.3.1 (level 1) macos_14: - 6.3.1 (level 1) + macos_27: + - 6.3.1 (level 1) controls_v8: - 9.1 - 9.6 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_safari_prevent_cross-site_tracking_enable.yaml b/src/mscp/data/rules/os/os_safari_prevent_cross-site_tracking_enable.yaml index 829e3736..66bba6b9 100644 --- a/src/mscp/data/rules/os/os_safari_prevent_cross-site_tracking_enable.yaml +++ b/src/mscp/data/rules/os/os_safari_prevent_cross-site_tracking_enable.yaml @@ -25,12 +25,17 @@ references: - 6.3.4 (level 1) macos_14: - 6.3.4 (level 1) + macos_27: + - 6.3.4 (level 1) controls_v8: - 9.1 - 9.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_safari_show_full_website_address_enable.yaml b/src/mscp/data/rules/os/os_safari_show_full_website_address_enable.yaml index 172045d5..a5c2172b 100644 --- a/src/mscp/data/rules/os/os_safari_show_full_website_address_enable.yaml +++ b/src/mscp/data/rules/os/os_safari_show_full_website_address_enable.yaml @@ -25,11 +25,16 @@ references: - 6.3.7 (level 1) macos_14: - 6.3.7 (level 1) + macos_27: + - 6.3.7 (level 1) controls_v8: - 9.1 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_safari_show_status_bar_enabled.yaml b/src/mscp/data/rules/os/os_safari_show_status_bar_enabled.yaml index 4b3be88a..4bb52144 100644 --- a/src/mscp/data/rules/os/os_safari_show_status_bar_enabled.yaml +++ b/src/mscp/data/rules/os/os_safari_show_status_bar_enabled.yaml @@ -25,11 +25,16 @@ references: - 6.3.10 (level 1) macos_14: - 6.3.10 (level 1) + macos_27: + - 6.3.10 (level 1) controls_v8: - 9.1 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_safari_warn_fraudulent_website_enable.yaml b/src/mscp/data/rules/os/os_safari_warn_fraudulent_website_enable.yaml index e4ee71d6..b775d44a 100644 --- a/src/mscp/data/rules/os/os_safari_warn_fraudulent_website_enable.yaml +++ b/src/mscp/data/rules/os/os_safari_warn_fraudulent_website_enable.yaml @@ -25,12 +25,17 @@ references: - 6.3.3 (level 1) macos_14: - 6.3.3 (level 1) + macos_27: + - 6.3.3 (level 1) controls_v8: - 9.1 - 9.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_sip_enable.yaml b/src/mscp/data/rules/os/os_sip_enable.yaml index 7b1dafe9..da09224c 100644 --- a/src/mscp/data/rules/os/os_sip_enable.yaml +++ b/src/mscp/data/rules/os/os_sip_enable.yaml @@ -95,6 +95,8 @@ references: - 5.1.2 (level 1) macos_14: - 5.1.2 (level 1) + macos_27: + - 5.1.2 (level 1) controls_v8: - 2.3 - 2.6 @@ -103,6 +105,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: high '26.0': diff --git a/src/mscp/data/rules/os/os_sleep_and_display_sleep_apple_silicon_enable.yaml b/src/mscp/data/rules/os/os_sleep_and_display_sleep_apple_silicon_enable.yaml index b1a66f26..cd2d4625 100644 --- a/src/mscp/data/rules/os/os_sleep_and_display_sleep_apple_silicon_enable.yaml +++ b/src/mscp/data/rules/os/os_sleep_and_display_sleep_apple_silicon_enable.yaml @@ -21,11 +21,15 @@ references: - 2.10.1.1 (level 2) macos_14: - 2.9.1.2 (level 2) + macos_27: + - 2.10.1 (level 2) controls_v8: - 4.1 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl2 diff --git a/src/mscp/data/rules/os/os_software_update_deferral.yaml b/src/mscp/data/rules/os/os_software_update_deferral.yaml index fc9513b4..0b0ff6ba 100644 --- a/src/mscp/data/rules/os/os_software_update_deferral.yaml +++ b/src/mscp/data/rules/os/os_software_update_deferral.yaml @@ -7,6 +7,8 @@ discussion: | references: nist: cce: + macos_27: + - CCE-XXXXX-X macos_26: - CCE-95303-4 macos_15: @@ -21,11 +23,17 @@ references: - 1.7 (level 1) macos_14: - 1.7 (level 1) + macos_27: + - 1.6 (level 1) controls_v8: - 7.3 - 7.4 platforms: macOS: + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_sudo_log_enforce.yaml b/src/mscp/data/rules/os/os_sudo_log_enforce.yaml index 6fa7aa4b..7fc6581b 100644 --- a/src/mscp/data/rules/os/os_sudo_log_enforce.yaml +++ b/src/mscp/data/rules/os/os_sudo_log_enforce.yaml @@ -41,10 +41,14 @@ references: - 5.11 (level 1) macos_15: - 5.11 (level 1) + macos_27: + - 5.11 (level 1) platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_sudo_timeout_configure.yaml b/src/mscp/data/rules/os/os_sudo_timeout_configure.yaml index 8deff8b1..f12231c0 100644 --- a/src/mscp/data/rules/os/os_sudo_timeout_configure.yaml +++ b/src/mscp/data/rules/os/os_sudo_timeout_configure.yaml @@ -39,12 +39,16 @@ references: - 5.4 (level 1) macos_14: - 5.4 (level 1) + macos_27: + - 5.4 (level 1) controls_v8: - 4.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_sudoers_timestamp_type_configure.yaml b/src/mscp/data/rules/os/os_sudoers_timestamp_type_configure.yaml index 1771ea60..f6a9eb66 100644 --- a/src/mscp/data/rules/os/os_sudoers_timestamp_type_configure.yaml +++ b/src/mscp/data/rules/os/os_sudoers_timestamp_type_configure.yaml @@ -47,12 +47,16 @@ references: - 5.5 (level 1) macos_14: - 5.5 (level 1) + macos_27: + - 5.5 (level 1) controls_v8: - 4.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_system_wide_applications_configure.yaml b/src/mscp/data/rules/os/os_system_wide_applications_configure.yaml index f97f0992..f52c7bb0 100644 --- a/src/mscp/data/rules/os/os_system_wide_applications_configure.yaml +++ b/src/mscp/data/rules/os/os_system_wide_applications_configure.yaml @@ -21,11 +21,16 @@ references: - 5.1.5 (level 1) macos_14: - 5.1.5 (level 1) + macos_27: + - 5.1.5 (level 1) controls_v8: - 3.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_terminal_secure_keyboard_enable.yaml b/src/mscp/data/rules/os/os_terminal_secure_keyboard_enable.yaml index a33e3bcc..10ffde69 100644 --- a/src/mscp/data/rules/os/os_terminal_secure_keyboard_enable.yaml +++ b/src/mscp/data/rules/os/os_terminal_secure_keyboard_enable.yaml @@ -25,11 +25,16 @@ references: - 6.4.1 (level 1) macos_14: - 6.4.1 (level 1) + macos_27: + - 6.4.1 (level 1) controls_v8: - 4.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_tftpd_disable.yaml b/src/mscp/data/rules/os/os_tftpd_disable.yaml index aae54855..a627d570 100644 --- a/src/mscp/data/rules/os/os_tftpd_disable.yaml +++ b/src/mscp/data/rules/os/os_tftpd_disable.yaml @@ -55,7 +55,6 @@ references: - 2.L.A - 3.L.C - 4.L.A - - '' cis: controls_v8: - 3.3 diff --git a/src/mscp/data/rules/os/os_time_server_enabled.yaml b/src/mscp/data/rules/os/os_time_server_enabled.yaml index 7e0bef8d..0fc21853 100644 --- a/src/mscp/data/rules/os/os_time_server_enabled.yaml +++ b/src/mscp/data/rules/os/os_time_server_enabled.yaml @@ -53,12 +53,16 @@ references: - 2.3.2.2 (level 1) macos_14: - 2.3.2.2 (level 1) + macos_27: + - 2.3.2.2 (level 1) controls_v8: - 8.4 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_unlock_active_user_session_disable.yaml b/src/mscp/data/rules/os/os_unlock_active_user_session_disable.yaml index d7527df9..4cc54671 100644 --- a/src/mscp/data/rules/os/os_unlock_active_user_session_disable.yaml +++ b/src/mscp/data/rules/os/os_unlock_active_user_session_disable.yaml @@ -56,12 +56,16 @@ references: - 5.7 (level 1) macos_14: - 5.7 (level 1) + macos_27: + - 5.7 (level 1) controls_v8: - 4.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/os/os_world_writable_library_folder_configure.yaml b/src/mscp/data/rules/os/os_world_writable_library_folder_configure.yaml index 9b85cd57..5bb945f3 100644 --- a/src/mscp/data/rules/os/os_world_writable_library_folder_configure.yaml +++ b/src/mscp/data/rules/os/os_world_writable_library_folder_configure.yaml @@ -23,11 +23,15 @@ references: - 5.1.7 (level 2) macos_14: - 5.1.7 (level 2) + macos_27: + - 5.1.7 (level 2) controls_v8: - 3.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl2 diff --git a/src/mscp/data/rules/os/os_world_writable_system_folder_configure.yaml b/src/mscp/data/rules/os/os_world_writable_system_folder_configure.yaml index ce0c3495..da6684da 100644 --- a/src/mscp/data/rules/os/os_world_writable_system_folder_configure.yaml +++ b/src/mscp/data/rules/os/os_world_writable_system_folder_configure.yaml @@ -21,11 +21,16 @@ references: - 5.1.6 (level 1) macos_14: - 5.1.6 (level 1) + macos_27: + - 5.1.6 (level 1) controls_v8: - 3.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/os/os_writing_tools_disable.yaml b/src/mscp/data/rules/os/os_writing_tools_disable.yaml index 04b2f6c0..ffb3541d 100644 --- a/src/mscp/data/rules/os/os_writing_tools_disable.yaml +++ b/src/mscp/data/rules/os/os_writing_tools_disable.yaml @@ -61,6 +61,8 @@ references: ios_26: - 2.9.4 (level 1 - End-User Owned Devices) - 3.10.4 (level 1 - Institutionally-Owned Devices) + macos_27: + - 2.5.1.2 (level 1) bsi: indigo: ios_26: @@ -71,6 +73,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': @@ -85,7 +89,7 @@ platforms: - name: disa_stig enforcement_info: check: - shell: |- + shell: |- /usr/bin/osascript -l JavaScript -e 'var s = $.NSUserDefaults.alloc.initWithSuiteName("com.apple.applicationaccess"); (ObjC.unwrap(s.objectForKey("allowWritingTools")) == false && s.objectIsForcedForKey("allowWritingTools")) ? "PASS" : "FAIL"' result: string: 'PASS' diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_enforce.yaml index b079ac5e..ce7cf2f4 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_enforce.yaml @@ -75,6 +75,8 @@ references: ios_17: - 2.4.6 (level 1 - End-User Owned Devices) - 3.4.6 (level 1 - Institutionally-Owned Devices) + macos_27: + - 5.2.1 (level 1) controls_v8: - 6.2 bsi: @@ -92,6 +94,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_timeout_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_timeout_enforce.yaml index 7ea14212..499b8e15 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_timeout_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_account_lockout_timeout_enforce.yaml @@ -45,12 +45,16 @@ references: - 5.2.1 (level 1) macos_14: - 5.2.1 (level 1) + macos_27: + - 5.2.1 (level 1) controls_v8: - 6.2 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_alpha_numeric_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_alpha_numeric_enforce.yaml index a8c23ad0..c443049b 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_alpha_numeric_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_alpha_numeric_enforce.yaml @@ -64,6 +64,9 @@ references: macos_14: - 5.2.3 (level 2) - 5.2.4 (level 2) + macos_27: + - 5.2.3 (level 2) + - 5.2.4 (level 2) controls_v8: - 5.2 bsi: @@ -81,6 +84,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_custom_regex_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_custom_regex_enforce.yaml index 1c1c1a99..38413906 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_custom_regex_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_custom_regex_enforce.yaml @@ -59,12 +59,15 @@ references: - 5.2.6 (level 2) macos_14: - 5.2.6 (level 2) + macos_27: + - 5.2.6 (level 2) controls_v8: - 5.2 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_history_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_history_enforce.yaml index cb04ec64..861d5746 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_history_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_history_enforce.yaml @@ -66,6 +66,8 @@ references: - 5.2.8 (level 1) macos_14: - 5.2.8 (level 1) + macos_27: + - 5.2.8 (level 1) controls_v8: - 5.2 bsi: @@ -81,7 +83,10 @@ references: - ANNEX K platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_max_lifetime_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_max_lifetime_enforce.yaml index 57686b6f..47ad6a1a 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_max_lifetime_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_max_lifetime_enforce.yaml @@ -52,12 +52,16 @@ references: - 5.2.7 (level 1) macos_14: - 5.2.7 (level 1) + macos_27: + - 5.2.7 (level 1) controls_v8: - 5.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_minimum_length_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_minimum_length_enforce.yaml index f68df408..e55e31c2 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_minimum_length_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_minimum_length_enforce.yaml @@ -86,6 +86,8 @@ references: ios_17: - 2.4.3 (level 1 - End-User Owned Devices) - 3.4.3 (level 1 - Institutionally-Owned Devices) + macos_27: + - 5.2.2 (level 1) controls_v8: - 5.2 bsi: @@ -103,6 +105,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/pwpolicy/pwpolicy_special_character_enforce.yaml b/src/mscp/data/rules/pwpolicy/pwpolicy_special_character_enforce.yaml index 85bfa0a7..f10a01eb 100644 --- a/src/mscp/data/rules/pwpolicy/pwpolicy_special_character_enforce.yaml +++ b/src/mscp/data/rules/pwpolicy/pwpolicy_special_character_enforce.yaml @@ -54,12 +54,15 @@ references: - 5.2.5 (level 2) macos_14: - 5.2.5 (level 2) + macos_27: + - 5.2.5 (level 2) controls_v8: - 5.2 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/supplemental/supplemental_cis_manual.yaml b/src/mscp/data/rules/supplemental/supplemental_cis_manual.yaml index d1991153..5d3277f3 100644 --- a/src/mscp/data/rules/supplemental/supplemental_cis_manual.yaml +++ b/src/mscp/data/rules/supplemental/supplemental_cis_manual.yaml @@ -10,34 +10,26 @@ discussion: | |System Settings |Recommendations - | 1.7 Ensure the System is Managed by a Mobile Device Management (MDM) Software - |=== - - [cols="15%h, 85%a"] - |=== - |Section - |System Settings - - |Recommendations - |2.1.1.1 Audit iCloud Keychain + + |2.1.1.1 Audit iCloud Passwords & Keychain + 2.1.1.2 Audit iCloud Drive + 2.1.1.4 Audit Security Keys Used With Apple Accounts + 2.1.1.5 Audit Freeform Sync to iCloud + 2.1.1.6 Audit Find My Mac + - 2.1.2 Audit App Store Password Settings + + 2.1.2 Audit App Store Password Settings (macOS 27 only) + 2.3.3.11 Ensure Computer Name Does Not Contain PII or Protected Organizational Information + + 2.3.5.1 Ensure 'allowUIConfigurationProfileInstallation' Is Set to Disabled + 2.4.1 Audit Menu Bar and Control Center Icons + - 2.5.2.2 Ensure Listen for Siri is Disabled + + 2.5.2.2 Ensure Listen for (Siri) Is Disabled + 2.6.1.3 Audit Location Services Access + 2.6.2.1 Audit Full Disk Access for Applications + 2.6.3.5 Ensure Share iCloud Analytics Is Disabled + 2.6.7 Audit Lockdown Mode + 2.7.2 Audit iPhone Mirroring + 2.8.1 Audit Universal Control Settings + - 2.10.1.1 Ensure the OS Is Not Active When Resuming from Standby (Intel) + + 2.10.1.1 Ensure the OS Is Not Active When Resuming from Standby (Intel) (macOS 26 and earlier) + 2.12.2 Audit Touch ID + 2.14.1 Audit Game Center Settings + - 2.15.1 Audit Notification & Focus Settings + + 2.15.1 Audit Notification Settings + 2.16.1 Audit Wallet & Apple Pay Settings + 2.17.1 Audit Internet Accounts for Authorized Use + |=== @@ -61,8 +53,7 @@ discussion: | 5.2.4 Ensure Complex Password Must Contain Numeric Character Is Configured + 5.2.5 Ensure Complex Password Must Contain Special Character Is Configured + 5.2.6 Ensure Complex Password Must Contain Uppercase and Lowercase Characters Is Configured + - 5.3.1 Ensure All User Storage APFS Volumes are Encrypted + - 5.3.2 Ensure All User Storage CoreStorage Volumes are Encrypted + + 5.3.3 Audit Connected FAT32 and ExFAT Drives + |=== [cols="15%h, 85%a"] @@ -71,11 +62,11 @@ discussion: | |Applications |Recommendations - |6.1.1 Ensure Show All Filename Extensions Setting is Enabled + + |6.1.1 Audit Show All Filename Extensions + 6.2.1 Ensure Protect Mail Activity in Mail Is Enabled + 6.3.2 Audit History and Remove History Items + 6.3.5 Audit Hide IP Address in Safari Setting + - 6.3.8 Audit Autofill + + 6.3.8 Audit AutoFill + 6.3.9 Audit Pop-up Windows + 6.5.1 Audit Passwords + |=== @@ -83,7 +74,10 @@ references: nist: {} platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_airplay_receiver_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_airplay_receiver_disable.yaml index 8cfc86e4..25cc770a 100644 --- a/src/mscp/data/rules/system_settings/system_settings_airplay_receiver_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_airplay_receiver_disable.yaml @@ -54,6 +54,8 @@ references: - 2.3.1.2 (level 1) macos_14: - 2.3.1.2 (level 1) + macos_27: + - 2.3.1.2 (level 1) controls_v8: - 4.1 - 4.8 @@ -61,6 +63,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_automatic_login_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_automatic_login_disable.yaml index 9d0892ae..1a57e88e 100644 --- a/src/mscp/data/rules/system_settings/system_settings_automatic_login_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_automatic_login_disable.yaml @@ -51,12 +51,16 @@ references: - 2.13.3 (level 1) macos_14: - 2.12.3 (level 1) + macos_27: + - 2.13.3 (level 1) controls_v8: - 4.7 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_bluetooth_settings_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_bluetooth_settings_disable.yaml index cce14db7..f47ba687 100644 --- a/src/mscp/data/rules/system_settings/system_settings_bluetooth_settings_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_bluetooth_settings_disable.yaml @@ -39,7 +39,6 @@ references: hicp: - 2.L.B - 3.L.B - - '' cis: controls_v8: - 4.1 diff --git a/src/mscp/data/rules/system_settings/system_settings_bluetooth_sharing_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_bluetooth_sharing_disable.yaml index 7c3aaa61..74033bb1 100644 --- a/src/mscp/data/rules/system_settings/system_settings_bluetooth_sharing_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_bluetooth_sharing_disable.yaml @@ -61,6 +61,8 @@ references: - 2.3.3.10 (level 1) macos_14: - 2.3.3.10 (level 1) + macos_27: + - 2.3.3.10 (level 1) controls_v8: - 3.3 - 4.1 @@ -68,6 +70,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_content_caching_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_content_caching_disable.yaml index fb683fd6..7b1da874 100644 --- a/src/mscp/data/rules/system_settings/system_settings_content_caching_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_content_caching_disable.yaml @@ -48,12 +48,15 @@ references: - 2.3.3.8 (level 2) macos_14: - 2.3.3.8 (level 2) + macos_27: + - 2.3.3.8 (level 2) controls_v8: - 4.8 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_critical_update_install_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_critical_update_install_enforce.yaml index 691ed81f..6f56b5b1 100644 --- a/src/mscp/data/rules/system_settings/system_settings_critical_update_install_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_critical_update_install_enforce.yaml @@ -29,6 +29,8 @@ references: - 1.6 (level 1) macos_14: - 1.6 (level 1) + macos_27: + - 1.5 (level 1) controls_v8: - 7.3 - 7.4 @@ -45,7 +47,10 @@ references: - 7.L.B platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': enforcement_info: check: diff --git a/src/mscp/data/rules/system_settings/system_settings_diagnostics_reports_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_diagnostics_reports_disable.yaml index 682a5bd3..0d1ae072 100644 --- a/src/mscp/data/rules/system_settings/system_settings_diagnostics_reports_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_diagnostics_reports_disable.yaml @@ -56,6 +56,9 @@ references: - 2.6.3.4 (level 1) macos_14: - 2.6.3 (level 2) + macos_27: + - 2.6.3.1 (level 1) + - 2.6.3.4 (level 1) controls_v8: - 4.1 - 4.8 @@ -63,6 +66,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_external_intelligence_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_external_intelligence_disable.yaml index bf4a384f..f677e338 100644 --- a/src/mscp/data/rules/system_settings/system_settings_external_intelligence_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_external_intelligence_disable.yaml @@ -24,7 +24,7 @@ references: visionos_27: - CCE-XXXXX-X visionos_26: - - CCE-95573-2 + - CCE-95573-2 800-53r5: - AC-20 - CM-7 @@ -55,7 +55,7 @@ references: - AC.L1-3.1.20 - AU.L2-3.3.3 - CM.L2-3.4.1 - - CM.L2-3.4.2 + - CM.L2-3.4.2 - CM.L2-3.4.6 - CM.L2-3.4.7 hhs: @@ -68,6 +68,8 @@ references: - 2.5.1.1 (level 1) macos_15: - 2.5.1.1 (level 1) + macos_27: + - 2.5.1.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -75,11 +77,13 @@ references: bsi: indigo: ios_26: - - ANNEX K + - ANNEX K platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': @@ -121,7 +125,7 @@ platforms: benchmarks: - name: visionos_stig severity: medium - introduced: '2.4' + introduced: '2.4' tags: - 800-53r5_low - 800-53r5_moderate diff --git a/src/mscp/data/rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml index d933acb6..24dd3d75 100644 --- a/src/mscp/data/rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml @@ -22,9 +22,9 @@ references: visionos_27: - CCE-XXXXX-X visionos_26: - - CCE-95574-0 + - CCE-95574-0 800-53r5: - - CM-6 + - CM-6 - AC-20 - CM-7 - CM-7(1) @@ -47,9 +47,9 @@ references: visionos_26: - AVOS-26-015400 sfr: - - 'FMT_MOF_EXT.1.2 #47' + - 'FMT_MOF_EXT.1.2 #47' cmmc: - - AC.L1-B.1.III + - AC.L1-B.1.III - AC.L1-3.1.20 - AU.L2-3.3.3 - CM.L2-3.4.1 @@ -59,7 +59,7 @@ references: bsi: indigo: ios_26: - - ANNEX K + - ANNEX K bzk: bio: - 8.12 @@ -76,7 +76,9 @@ references: - 2.5.1.1 (level 1) ios_26: - 2.9.1 (level 1 - End-User Owned Devices) - - 3.10.1 (level 1 - Institutionally-Owned Devices) + - 3.10.1 (level 1 - Institutionally-Owned Devices) + macos_27: + - 2.5.1.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -85,6 +87,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': @@ -132,7 +136,7 @@ platforms: benchmarks: - name: visionos_stig severity: medium - introduced: '2.4' + introduced: '2.4' tags: - 800-53r5_low - 800-53r5_moderate diff --git a/src/mscp/data/rules/system_settings/system_settings_filevault_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_filevault_enforce.yaml index 167ee277..61005bf2 100644 --- a/src/mscp/data/rules/system_settings/system_settings_filevault_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_filevault_enforce.yaml @@ -1,12 +1,12 @@ id: system_settings_filevault_enforce title: Enforce FileVault -discussion: | +discussion: | FileVault _MUST_ be enabled. - + On Mac computers with Apple silicon or the Apple T2 Security Chip, internal storage is encrypted by default. Enabling FileVault provides additional protection by requiring an authorized user's credentials or a valid recovery key to unlock the data volume during the boot process. - + When FileVault is enabled, the volume encryption key is protected by both the hardware UID and the user's credentials. This protects data at rest against unauthorized access if the device is lost, stolen, or otherwise removed from a controlled area. - + NOTE: See the FileVault supplemental guidance for implementation and recovery-key escrow requirements. references: nist: @@ -63,6 +63,8 @@ references: - 2.6.6 (level 1) macos_14: - 2.6.6 (level 1) + macos_27: + - 2.6.6 (level 1) controls_v8: - 3.6 - 3.11 @@ -70,6 +72,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: high '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_firewall_enable.yaml b/src/mscp/data/rules/system_settings/system_settings_firewall_enable.yaml index f88df713..e3060666 100644 --- a/src/mscp/data/rules/system_settings/system_settings_firewall_enable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_firewall_enable.yaml @@ -60,6 +60,8 @@ references: - 2.2.1 (level 1) macos_14: - 2.2.1 (level 1) + macos_27: + - 2.2.1 (level 1) controls_v8: - 4.1 - 4.5 @@ -68,6 +70,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_firewall_stealth_mode_enable.yaml b/src/mscp/data/rules/system_settings/system_settings_firewall_stealth_mode_enable.yaml index 870765da..f9cb6091 100644 --- a/src/mscp/data/rules/system_settings/system_settings_firewall_stealth_mode_enable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_firewall_stealth_mode_enable.yaml @@ -49,13 +49,18 @@ references: - 2.2.2 (level 1) macos_14: - 2.2.2 (level 1) + macos_27: + - 2.2.2 (level 1) controls_v8: - 4.1 - 4.5 - 4.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_guest_access_smb_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_guest_access_smb_disable.yaml index 081ff6b7..f6cb9a18 100644 --- a/src/mscp/data/rules/system_settings/system_settings_guest_access_smb_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_guest_access_smb_disable.yaml @@ -31,11 +31,16 @@ references: - 2.13.2 (level 1) macos_14: - 2.12.2 (level 1) + macos_27: + - 2.13.2 (level 1) controls_v8: - 3.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_guest_account_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_guest_account_disable.yaml index d3e6ae93..f66304cd 100644 --- a/src/mscp/data/rules/system_settings/system_settings_guest_account_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_guest_account_disable.yaml @@ -54,6 +54,8 @@ references: - 2.13.1 (level 1) macos_14: - 2.12.1 (level 1) + macos_27: + - 2.13.1 (level 1) controls_v8: - 5.2 - 6.2 @@ -62,6 +64,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_hot_corners_secure.yaml b/src/mscp/data/rules/system_settings/system_settings_hot_corners_secure.yaml index 342cc6a6..937efa2d 100644 --- a/src/mscp/data/rules/system_settings/system_settings_hot_corners_secure.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_hot_corners_secure.yaml @@ -37,11 +37,16 @@ references: - 2.7.1 (level 2) macos_14: - 2.7.1 (level 2) + macos_27: + - 2.7.1 (level 1) controls_v8: - 4.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_improve_assistive_voice_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_improve_assistive_voice_disable.yaml index cdff24ac..19ed7055 100644 --- a/src/mscp/data/rules/system_settings/system_settings_improve_assistive_voice_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_improve_assistive_voice_disable.yaml @@ -51,6 +51,8 @@ references: - 2.6.3.3 (level 1) macos_15: - 2.6.3.3 (level 1) + macos_27: + - 2.6.3.3 (level 1) controls_v8: - 4.1 - 4.8 @@ -58,6 +60,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_improve_search_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_improve_search_disable.yaml index 25501d45..4e111b3f 100644 --- a/src/mscp/data/rules/system_settings/system_settings_improve_search_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_improve_search_disable.yaml @@ -47,9 +47,11 @@ references: cis: benchmark: macos_26: - - 2.9.1 + - 2.9.1 (level 1) macos_15: - 2.9.1 (level 1) + macos_27: + - 2.9.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -57,6 +59,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_improve_siri_dictation_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_improve_siri_dictation_disable.yaml index 02fb90e6..13793769 100644 --- a/src/mscp/data/rules/system_settings/system_settings_improve_siri_dictation_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_improve_siri_dictation_disable.yaml @@ -57,6 +57,8 @@ references: - 2.6.3.2 (level 1) macos_14: - 2.6.3 (level 2) + macos_27: + - 2.6.3.2 (level 1) controls_v8: - 4.1 - 4.8 @@ -64,6 +66,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_install_macos_updates_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_install_macos_updates_enforce.yaml index a67dfb55..bbd6f2ce 100644 --- a/src/mscp/data/rules/system_settings/system_settings_install_macos_updates_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_install_macos_updates_enforce.yaml @@ -16,7 +16,7 @@ references: ios_27: - CCE-XXXXX-X ios_26: - - CCE-96731-5 + - CCE-96731-5 cis: benchmark: macos_26: @@ -25,6 +25,8 @@ references: - 1.4 (level 1) macos_14: - 1.4 (level 1) + macos_27: + - 1.3 (level 1) controls_v8: - 7.3 - 7.4 @@ -34,7 +36,10 @@ references: - 8.08.01 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': enforcement_info: check: @@ -59,12 +64,12 @@ platforms: mobileconfig_info: - PayloadType: com.apple.SoftwareUpdate PayloadContent: - - AutomaticallyInstallMacOSUpdates: true + - AutomaticallyInstallMacOSUpdates: true benchmarks: - name: cis_lvl1 - name: cis_lvl2 - name: nlmapgov_plus - - name: nlmapgov_base + - name: nlmapgov_base '15.0': enforcement_info: check: @@ -78,7 +83,7 @@ platforms: mobileconfig_info: - PayloadType: com.apple.SoftwareUpdate PayloadContent: - - AutomaticallyInstallMacOSUpdates: true + - AutomaticallyInstallMacOSUpdates: true benchmarks: - name: cis_lvl1 - name: cis_lvl2 @@ -90,8 +95,8 @@ platforms: result: integer: 1 fix: - additional_info: This is implemented by Declarative Device Management (DDM). - + additional_info: This is implemented by Declarative Device Management (DDM). + introduced: '10.15' iOS: '27.0': {} diff --git a/src/mscp/data/rules/system_settings/system_settings_internet_sharing_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_internet_sharing_disable.yaml index f2819f89..b2c8fa25 100644 --- a/src/mscp/data/rules/system_settings/system_settings_internet_sharing_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_internet_sharing_disable.yaml @@ -54,6 +54,8 @@ references: - 2.3.3.7 (level 1) macos_14: - 2.3.3.7 (level 1) + macos_27: + - 2.3.3.7 (level 1) controls_v8: - 4.1 - 4.8 @@ -61,6 +63,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_location_services_enable.yaml b/src/mscp/data/rules/system_settings/system_settings_location_services_enable.yaml index 87ce18c9..b82dd5a3 100644 --- a/src/mscp/data/rules/system_settings/system_settings_location_services_enable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_location_services_enable.yaml @@ -21,12 +21,16 @@ references: - 2.6.1.1 (level 2) macos_14: - 2.6.1.1 (level 2) + macos_27: + - 2.6.1.1 (level 2) controls_v8: - 4.1 - 4.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl2 diff --git a/src/mscp/data/rules/system_settings/system_settings_location_services_menu_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_location_services_menu_enforce.yaml index c97ea16e..3d800428 100644 --- a/src/mscp/data/rules/system_settings/system_settings_location_services_menu_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_location_services_menu_enforce.yaml @@ -21,19 +21,21 @@ references: - 2.6.1.2 (level 2) macos_14: - 2.6.1.2 (level 2) + macos_27: + - 2.6.1.2 (level 2) controls_v8: - 4.1 - 4.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 '26.0': benchmarks: - - name: cis_lvl1 - name: cis_lvl2 '15.0': benchmarks: - - name: cis_lvl1 - name: cis_lvl2 enforcement_info: check: diff --git a/src/mscp/data/rules/system_settings/system_settings_loginwindow_loginwindowtext_enable.yaml b/src/mscp/data/rules/system_settings/system_settings_loginwindow_loginwindowtext_enable.yaml index 9efadacc..c47c948e 100644 --- a/src/mscp/data/rules/system_settings/system_settings_loginwindow_loginwindowtext_enable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_loginwindow_loginwindowtext_enable.yaml @@ -25,11 +25,16 @@ references: - 2.11.3 (level 1) macos_14: - 2.10.3 (level 1) + macos_27: + - 2.11.3 (level 1) controls_v8: - 4.1 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_loginwindow_prompt_username_password_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_loginwindow_prompt_username_password_enforce.yaml index f3dccd55..a45df61b 100644 --- a/src/mscp/data/rules/system_settings/system_settings_loginwindow_prompt_username_password_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_loginwindow_prompt_username_password_enforce.yaml @@ -44,12 +44,16 @@ references: - 2.11.4 (level 1) macos_14: - 2.10.4 (level 1) + macos_27: + - 2.11.4 (level 1) controls_v8: - 4.1 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_media_sharing_disabled.yaml b/src/mscp/data/rules/system_settings/system_settings_media_sharing_disabled.yaml index c01ebb5c..12a83a3b 100644 --- a/src/mscp/data/rules/system_settings/system_settings_media_sharing_disabled.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_media_sharing_disabled.yaml @@ -58,6 +58,8 @@ references: - 2.3.3.9 (level 2) macos_14: - 2.3.3.9 (level 2) + macos_27: + - 2.3.3.9 (level 2) controls_v8: - 4.1 - 4.8 @@ -65,6 +67,7 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_password_hints_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_password_hints_disable.yaml index 28e710f0..ff2b05e9 100644 --- a/src/mscp/data/rules/system_settings/system_settings_password_hints_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_password_hints_disable.yaml @@ -47,12 +47,16 @@ references: - 2.11.5 (level 1) macos_14: - 2.10.5 (level 1) + macos_27: + - 2.11.5 (level 1) controls_v8: - 4.1 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_personalized_advertising_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_personalized_advertising_disable.yaml index 95f1fd0d..9ad48c20 100644 --- a/src/mscp/data/rules/system_settings/system_settings_personalized_advertising_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_personalized_advertising_disable.yaml @@ -56,12 +56,16 @@ references: - 2.6.4 (level 1) macos_14: - 2.6.4 (level 1) + macos_27: + - 2.6.4 (level 1) controls_v8: - 4.8 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_printer_sharing_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_printer_sharing_disable.yaml index e6d7d03f..354099ce 100644 --- a/src/mscp/data/rules/system_settings/system_settings_printer_sharing_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_printer_sharing_disable.yaml @@ -52,6 +52,8 @@ references: - 2.3.3.3 (level 1) macos_14: - 2.3.3.3 (level 1) + macos_27: + - 2.3.3.3 (level 1) controls_v8: - 4.1 - 4.8 @@ -59,6 +61,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_rae_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_rae_disable.yaml index 5900c10d..d7f72b73 100644 --- a/src/mscp/data/rules/system_settings/system_settings_rae_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_rae_disable.yaml @@ -56,6 +56,8 @@ references: - 2.3.3.6 (level 1) macos_14: - 2.3.3.6 (level 1) + macos_27: + - 2.3.3.6 (level 1) controls_v8: - 4.1 - 4.8 @@ -63,6 +65,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_remote_management_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_remote_management_disable.yaml index c3dd02f7..bd363df2 100644 --- a/src/mscp/data/rules/system_settings/system_settings_remote_management_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_remote_management_disable.yaml @@ -52,6 +52,8 @@ references: - 2.3.3.5 (level 1) macos_14: - 2.3.3.5 (level 1) + macos_27: + - 2.3.3.5 (level 1) controls_v8: - 4.1 - 4.8 @@ -60,6 +62,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_screen_sharing_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_screen_sharing_disable.yaml index 0be91d24..6a0b8356 100644 --- a/src/mscp/data/rules/system_settings/system_settings_screen_sharing_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_screen_sharing_disable.yaml @@ -54,6 +54,8 @@ references: - 2.3.3.1 (level 1) macos_14: - 2.3.3.1 (level 1) + macos_27: + - 2.3.3.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -61,6 +63,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_screensaver_ask_for_password_delay_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_screensaver_ask_for_password_delay_enforce.yaml index a96001db..c1e5818d 100644 --- a/src/mscp/data/rules/system_settings/system_settings_screensaver_ask_for_password_delay_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_screensaver_ask_for_password_delay_enforce.yaml @@ -47,12 +47,16 @@ references: - 2.11.2 (level 1) macos_14: - 2.10.2 (level 1) + macos_27: + - 2.11.2 (level 1) controls_v8: - 4.7 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_screensaver_password_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_screensaver_password_enforce.yaml index eed604c2..5a7b78dd 100644 --- a/src/mscp/data/rules/system_settings/system_settings_screensaver_password_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_screensaver_password_enforce.yaml @@ -44,12 +44,16 @@ references: benchmark: macos_26: - 2.11.2 (level 1) + macos_27: + - 2.11.2 (level 1) controls_v8: - 4.7 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_screensaver_timeout_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_screensaver_timeout_enforce.yaml index 6a01231f..706fdb9f 100644 --- a/src/mscp/data/rules/system_settings/system_settings_screensaver_timeout_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_screensaver_timeout_enforce.yaml @@ -49,12 +49,16 @@ references: - 2.11.1 (level 1) macos_14: - 2.10.1 (level 1) + macos_27: + - 2.11.1 (level 1) controls_v8: - 4.3 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_siri_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_siri_disable.yaml index 543529f7..85436e5b 100644 --- a/src/mscp/data/rules/system_settings/system_settings_siri_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_siri_disable.yaml @@ -84,6 +84,8 @@ references: - 2.5.2.1 (level 1) macos_14: - 2.5.1 (level 1) + macos_27: + - 2.5.2.1 (level 1) controls_v8: - 4.1 - 4.8 @@ -91,6 +93,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': @@ -107,7 +111,7 @@ platforms: severity: medium enforcement_info: check: - shell: |- + shell: |- /usr/bin/osascript -l JavaScript -e 'var s = $.NSUserDefaults.alloc.initWithSuiteName("com.apple.applicationaccess"); (ObjC.unwrap(s.objectForKey("allowAssistant")) == false && s.objectIsForcedForKey("allowAssistant")) ? "PASS" : "FAIL"' result: string: 'PASS' @@ -171,7 +175,7 @@ tags: mobileconfig_info: - PayloadType: com.apple.applicationaccess PayloadContent: - - allowAssistant: false + - allowAssistant: false ddm_info: declarationtype: com.apple.configuration.siri.settings ddm_key: Enabled diff --git a/src/mscp/data/rules/system_settings/system_settings_smbd_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_smbd_disable.yaml index 4160f38f..99be6f76 100644 --- a/src/mscp/data/rules/system_settings/system_settings_smbd_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_smbd_disable.yaml @@ -54,6 +54,8 @@ references: - 2.3.3.2 (level 1) macos_14: - 2.3.3.2 (level 1) + macos_27: + - 2.3.3.2 (level 1) controls_v8: - 4.1 - 4.8 @@ -62,6 +64,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_software_update_app_update_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_software_update_app_update_enforce.yaml index 08bcbe57..5b4e95d4 100644 --- a/src/mscp/data/rules/system_settings/system_settings_software_update_app_update_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_software_update_app_update_enforce.yaml @@ -24,11 +24,21 @@ references: - 1.5 (level 1) macos_14: - 1.5 (level 1) + macos_27: + - 1.4 (level 1) controls_v8: - 7.3 - 7.4 platforms: macOS: + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 + '26.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '15.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_software_update_download_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_software_update_download_enforce.yaml index 29f3294a..f2b810b9 100644 --- a/src/mscp/data/rules/system_settings/system_settings_software_update_download_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_software_update_download_enforce.yaml @@ -16,7 +16,7 @@ references: ios_27: - CCE-XXXXX-X ios_26: - - CCE-96730-7 + - CCE-96730-7 cis: benchmark: macos_26: @@ -25,6 +25,8 @@ references: - 1.3 (level 1) macos_14: - 1.3 (level 1) + macos_27: + - 1.2 (level 1) controls_v8: - 7.3 - 7.4 @@ -34,7 +36,10 @@ references: - 8.08 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': enforcement_info: check: @@ -91,7 +96,7 @@ platforms: supervised: true benchmarks: - name: nlmapgov_base - - name: nlmapgov_plus + - name: nlmapgov_plus tags: - cisv8 mobileconfig_info: diff --git a/src/mscp/data/rules/system_settings/system_settings_softwareupdate_current.yaml b/src/mscp/data/rules/system_settings/system_settings_softwareupdate_current.yaml index 45c3a342..02bd74e8 100644 --- a/src/mscp/data/rules/system_settings/system_settings_softwareupdate_current.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_softwareupdate_current.yaml @@ -48,6 +48,8 @@ references: - 1.1 (level 1) macos_14: - 1.1 (level 1) + macos_27: + - 1.1 (level 1) controls_v8: - 7.3 - 7.4 @@ -55,6 +57,8 @@ platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_ssh_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_ssh_disable.yaml index a8715593..1baf8ce9 100644 --- a/src/mscp/data/rules/system_settings/system_settings_ssh_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_ssh_disable.yaml @@ -40,12 +40,17 @@ references: - 2.3.3.4 (level 1) macos_14: - 2.3.3.4 (level 1) + macos_27: + - 2.3.3.4 (level 1) controls_v8: - 4.1 - 4.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_ssh_enable.yaml b/src/mscp/data/rules/system_settings/system_settings_ssh_enable.yaml index c100bc0a..b8a66d45 100644 --- a/src/mscp/data/rules/system_settings/system_settings_ssh_enable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_ssh_enable.yaml @@ -33,7 +33,6 @@ references: - 3.L.B - 3.L.C - 6.L.A - - '' platforms: macOS: '27.0': {} diff --git a/src/mscp/data/rules/system_settings/system_settings_system_wide_preferences_configure.yaml b/src/mscp/data/rules/system_settings/system_settings_system_wide_preferences_configure.yaml index b984f2e4..7dfef508 100644 --- a/src/mscp/data/rules/system_settings/system_settings_system_wide_preferences_configure.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_system_wide_preferences_configure.yaml @@ -57,12 +57,16 @@ references: - 2.6.8 (level 1) macos_14: - 2.6.8 (level 1) + macos_27: + - 2.6.8 (level 1) controls_v8: - 4.1 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: high '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_time_machine_auto_backup_enable.yaml b/src/mscp/data/rules/system_settings/system_settings_time_machine_auto_backup_enable.yaml index 65fd18f7..f69c1720 100644 --- a/src/mscp/data/rules/system_settings/system_settings_time_machine_auto_backup_enable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_time_machine_auto_backup_enable.yaml @@ -21,11 +21,15 @@ references: - 2.3.4.1 (level 2) macos_14: - 2.3.4.1 (level 2) + macos_27: + - 2.3.4.1 (level 2) controls_v8: - 11.2 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl2 @@ -56,4 +60,4 @@ tags: mobileconfig_info: - PayloadType: com.apple.TimeMachine PayloadContent: - - AutoBackup: true \ No newline at end of file + - AutoBackup: true diff --git a/src/mscp/data/rules/system_settings/system_settings_time_machine_encrypted_configure.yaml b/src/mscp/data/rules/system_settings/system_settings_time_machine_encrypted_configure.yaml index 3efe8ca7..1bdaa44d 100644 --- a/src/mscp/data/rules/system_settings/system_settings_time_machine_encrypted_configure.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_time_machine_encrypted_configure.yaml @@ -25,13 +25,18 @@ references: - 2.3.4.2 (level 1) macos_14: - 2.3.4.2 (level 1) + macos_27: + - 2.3.4.2 (level 1) controls_v8: - 3.6 - 3.11 - 11.3 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1 diff --git a/src/mscp/data/rules/system_settings/system_settings_time_server_configure.yaml b/src/mscp/data/rules/system_settings/system_settings_time_server_configure.yaml index d7123927..28ac5f50 100644 --- a/src/mscp/data/rules/system_settings/system_settings_time_server_configure.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_time_server_configure.yaml @@ -55,12 +55,16 @@ references: - 2.3.2.1 (level 1) macos_14: - 2.3.2.1 (level 1) + macos_27: + - 2.3.2.1 (level 1) controls_v8: - 8.4 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_time_server_enforce.yaml b/src/mscp/data/rules/system_settings/system_settings_time_server_enforce.yaml index 3551efea..38cf632d 100644 --- a/src/mscp/data/rules/system_settings/system_settings_time_server_enforce.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_time_server_enforce.yaml @@ -52,12 +52,16 @@ references: - 2.3.2.1 (level 1) macos_14: - 2.3.2.1 (level 1) + macos_27: + - 2.3.2.1 (level 1) controls_v8: - 8.4 platforms: macOS: '27.0': benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 - name: disa_stig severity: medium '26.0': diff --git a/src/mscp/data/rules/system_settings/system_settings_wake_network_access_disable.yaml b/src/mscp/data/rules/system_settings/system_settings_wake_network_access_disable.yaml index 77897aa8..07862ccb 100644 --- a/src/mscp/data/rules/system_settings/system_settings_wake_network_access_disable.yaml +++ b/src/mscp/data/rules/system_settings/system_settings_wake_network_access_disable.yaml @@ -21,11 +21,16 @@ references: - 2.10.3 (level 1) macos_14: - 2.9.3 (level 1) + macos_27: + - 2.10.2 (level 1) controls_v8: - 4.8 platforms: macOS: - '27.0': {} + '27.0': + benchmarks: + - name: cis_lvl1 + - name: cis_lvl2 '26.0': benchmarks: - name: cis_lvl1