usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-08-11 23:41:45 +01:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity
2,390 Commits 18 Branches 64 Tags
dev_27
Commit Graph

56 Commits

Author SHA1 Message Date
Dan Brodjieski
6166178958 fix: update chmod for script 2026-05-12 16:11:43 -04:00
Dan Brodjieski
37a52478b4 refactor: migrate standalone script to CLI 
remove unnecessary symlink
 2026-01-12 13:22:07 -05:00
Allen Golbig
2a13854524 add function for get_macos_version 2025-12-24 15:49:59 -05:00
Bob Gendler
640a03de81 feat[scripts] updated mscp cli 
Updated mscp.py to generate scap
 2025-12-19 11:14:19 -05:00
Dan Brodjieski
b1deb07f57 Revert "Merge branch 'dev_2.0' into dev_2.0" 
This reverts commit 6ac2dc6805, reversing
changes made to 60b04555fd.
 2025-11-14 12:04:08 -05:00
Dan Brodjieski
6ac2dc6805 Merge branch 'dev_2.0' into dev_2.0 2025-11-14 11:50:15 -05:00
Bob Gendler
60b04555fd feat[script]: Added SCAP generation for 2.0 
* Modified macsecurityrule class to processes additional fields.
* Added scap, oval, xccdf generation
 2025-11-14 10:09:49 -05:00
Dan Brodjieski
3322122882 update individual generate scripts 2025-08-22 15:09:12 -04:00
Dan Brodjieski
c960d7772b feature: initial skeleton for scap 2025-08-07 20:07:41 -04:00
Bob Gendler
da950ab1b5 refactor[scripts] Move scripts to legacy 
Moved mSCP 1.0 legacy scripts to legacy/
 2025-03-12 12:53:26 -04:00
Bob Gendler
9dfeaf8ed6 update generate_scap 2024-09-12 12:51:16 -04:00
Bob Gendler
62a5b5839d sync branches 2024-09-12 12:10:10 -04:00
robertgendler
11f29f13b7 fixed odv issue, sync branches 2024-09-11 10:33:35 -04:00
Bob Gendler
3292df645e refactor[scripts] Fixed for xprotect 
No relevant oval test for os_anti_virus_installed
 2024-09-09 21:15:52 -04:00
mahlmanj
0eea7ff1e4 Spelling fixes, added note in system_settings_siri_settings_disable 2024-09-05 12:24:46 -04:00
Bob Gendler
615317fe6c refactor[scripts/templates] Updated 171r2 to 171r3 
Changed the 171r2s to 171r3s everywhere
 2024-09-01 21:36:10 -04:00
Dan Brodjieski
6a4af2dfef feat[doc]: add support for severity 
severity key in yaml can be string or a dictionary containing
key/values for different baselines
if a severity exists for a rule, it will be included in the reference
table within the HTML/PDF as well as a column in the XLS
 2024-08-22 15:52:33 -04:00
Bob Gendler
bad4dab841 fixed duplicate ID issue 2024-04-23 14:01:45 -04:00
Bob Gendler
9f279f9767 scap fix 2024-04-08 16:01:28 -04:00
Bob Gendler
58a57956c3 fixed regex in launchd test 2023-09-21 09:46:24 -04:00
Bob Gendler
7a7fb9a3b0 added missing x += 1 and continue 2023-09-16 14:40:07 -04:00
Bob Gendler
cdb738d739 fixed indentation causing no plist511 state for boolean 2023-09-16 14:38:44 -04:00
Bob Gendler
04ed18850d refactor[rules] Added customRegex check 
Modified to test for customRegex in com.apple.mobiledevice.passwordpolicy
 2023-09-16 13:30:34 -04:00
Bob Gendler
8250d020aa refactor[scripts] updated to handle new pwpolicy 
Updated to handle dict better in mobileconfig files
 2023-09-15 23:00:54 -04:00
Bob Gendler
ba71f606cc fixed odv replacement 2023-09-15 15:08:28 -04:00
Bob Gendler
0ea642ad2d synchronize across branches 2023-09-15 12:32:24 -04:00
Dan Brodjieski
5acbdbd21e chore: clean up extraneous trailing whitespace 2023-09-14 14:21:06 -04:00
Bob Gendler
3337ba8ae7 feature[scripts] Adding iOS Support in scripts 
* Updated generate_guidance
* Updated generate_baseline
* Updated generate_mapping
* Updated generate_scap

All to match iOS
 2023-09-14 11:45:23 -04:00
Bob Gendler
1eb52857d4 refactor[scripts] updated scripts with sshd -G 
- compliance script updated to check sshd -T or sshd -G
- updated generate_scap where it checks for sshd -T
 2023-08-02 10:12:58 -04:00
Bob Gendler
8e26ccc3b6 updated to prevent crashes 2023-06-26 11:52:32 -04:00
Bob Gendler
82ff896adb [fix] generate_scap fix from change in sshd check 
Fix added to generate_scap.py due to change in
auth_ssh_password_authentication_disable check using sshd -T.

Now works if using double or single quote around when you're searching for
 2023-04-03 11:39:57 -04:00
Bob Gendler
59e0890c95 Added incremental of x 2022-10-20 10:37:20 -04:00
Bob Gendler
8b3bdac7c2 fix [generate_scap] Updated authdb check 
Added oval generation for new authdb check for Ventura
 2022-10-19 14:08:27 -04:00
Allen Golbig
d334ce846a Merge branch 'dev_ventura_issue167' into dev_ventura 2022-09-29 09:15:11 -04:00
Bob Gendler
6a3d17f453 refactor[generate_scap] checks for new checks 
Added ability to check the new way for sudo -V and
for systempreferences DisabledSystemSettings
 2022-09-19 14:03:59 -04:00
Bob Gendler
b219680537 refactor[script]:Update to generate_scap for 13.0 
Added a condition for ventura launchctl disable checks

Related to Issue #167
 2022-09-13 14:51:32 -04:00
Bob Gendler
d4f326c1eb fixes and more 2022-09-13 11:42:41 -04:00
Bob Gendler
eee2025178 grep or awk with sshd -T checks 2022-09-12 16:34:23 -04:00
Bob Gendler
1f70933011 new oval checks for updated ssh_config checks and sshd enhanced checks 2022-08-16 21:36:30 -04:00
Bob Gendler
8a4ff89841 sys_prefs or system_settings 2022-08-11 20:57:37 -04:00
Allen Golbig
720d16bb7c sysprefs to system_settings 2022-08-04 10:05:03 -04:00
Bob Gendler
022c2fb496 default to recommended 2022-05-26 13:28:46 -04:00
Bob Gendler
65a2cff5ac better handling odv 2022-05-25 10:40:02 -04:00
Bob Gendler
0eef896e4c generates oval for specific odv 2022-05-24 09:29:40 -04:00
Bob Gendler
103f985005 export as xccdf(-x), oval(-o) or scap 2022-05-23 15:39:17 -04:00
Bob Gendler
3a57855d3e unsupported xccdf references added, fixed oval creation for com.apple.dock hot corners, fixed spctl ocil 2022-05-18 09:56:10 -04:00
Bob Gendler
60c2d0f194 removed debugging comments 2022-05-12 13:57:00 -04:00
Bob Gendler
3d353c0b82 fixed ODV replacement 2022-05-12 13:54:48 -04:00
Bob Gendler
b280414eed many schema fixes 2022-05-10 16:44:41 -04:00
Bob Gendler
303c906b5b fixed double custom rules 2022-05-09 20:31:57 -04:00