mahlmanj
0eea7ff1e4
Spelling fixes, added note in system_settings_siri_settings_disable
2024-09-05 12:24:46 -04:00
Bob Gendler
d249abe084
refactor[rules] External Storage
...
Modified os_network_storage_restriction and os_external_storage_access_defined
2024-09-04 12:41:45 -04:00
Bob Gendler
7ea663372f
Added 800-53 tags
2024-09-04 12:24:36 -04:00
Bob Gendler
f22aeb65ec
Fixed merge conflict
2024-09-04 12:22:20 -04:00
Bob Gendler
367a818e01
resolved merge conflicts
2024-09-04 12:21:50 -04:00
Bob Gendler
5d9cc9690f
fixed merge conflicts
2024-09-04 12:19:32 -04:00
Bob Gendler
98c46e62ef
updated supported payloads. copied sudo_log from stig
2024-09-04 10:53:39 -04:00
Bob Gendler
36be258cd3
refactor[rules]Added 15.x specific rules 171r3
...
Added 171r3 references to new rule files
2024-09-01 21:35:38 -04:00
Bob Gendler
9271106cd6
refactor[rules] Converted 171r2 to 171r3
...
Added 171r3 to some rules
Converted 171r2 to r3 in most rules
2024-09-01 21:28:47 -04:00
John Mahlman
b85739a2d3
Update os_sudo_log_enforce.
2024-08-30 10:14:15 -04:00
John Mahlman
b5deee9445
Add Sequoia CMMC branch. Apple Intelligence rules tagged.
2024-08-30 09:54:43 -04:00
Dan Brodjieski
fd05002da9
Merge branch 'dev_sequoia' into dev_sequoia_severity
2024-08-22 15:49:59 -04:00
Allen Golbig
9409afae43
updated check for os_anti_virus_installed
2024-08-15 10:02:45 -04:00
Bob Gendler
e6ca686eb9
Removed os_gatekeeper_rearm
2024-08-14 10:26:13 -04:00
robertgendler
b266b6e0cd
renamed file
2024-08-08 10:00:38 -04:00
robertgendler
e510dd1fa3
Removed os_gatekeeper_rearm, Added so_sudo_log_enforce
2024-08-08 09:57:55 -04:00
robertgendler
bcfc179096
removed firewall logging rule
2024-08-07 09:34:21 -04:00
Bob Gendler
a6868651e4
updated fips 140-2 to 140-3
2024-08-05 11:10:21 -04:00
Bob Gendler
03d8fb31f5
updated result
2024-08-05 11:08:39 -04:00
Bob Gendler
71e7fe24a8
refactor[rules] Updated FIPS SSH rules
...
Updated check/fix for macOS 15 and ssh fips configuration.
2024-08-05 11:06:28 -04:00
Dan Brodjieski
d986f549ff
refactor[ddm]: add ddm info to sudo rule
2024-07-30 15:01:24 -04:00
Dan Brodjieski
5e782d3fdd
refactor[ddm]: add ddm info to remaining sshd rules
2024-07-30 15:01:01 -04:00
Bob Gendler
539cdfd83d
refactor[rules] Added Disk Management DDM
...
Added com.apple.configuration.diskmanagement.settings to mscp-data
Added os_external_storage_restriction
Added os_network_storage_restriction
2024-07-26 14:50:43 -04:00
Bob Gendler
96ade12e2f
feat[ddm] Added DDM to sequoia
...
Updated scripts and rule files
2024-07-24 14:00:10 -04:00
Bob Gendler
d75a7b1245
Fixed the fix statement
2024-07-16 11:51:49 -04:00
Bob Gendler
dec9527722
fixed checked
2024-07-16 10:23:36 -04:00
Bob Gendler
ea3b1f0bc4
refactor[rules] Added AI rules
...
Added
* os_genmoji_disable
* os_image_generation_disable
* os_iphone_mirroring_disable
* os_writing_tools_disable
2024-07-15 21:37:49 -04:00
Bob Gendler
97cde24135
updated check to use jxa
2024-07-15 21:07:00 -04:00
Bob Gendler
182a4d8d1e
refactor[rules] Gatekeeper rules
...
Gatekeeper is fully enforced by configuration profile now.
2024-07-15 21:00:28 -04:00
Allen Golbig
866f60c723
updated os_implement_cryptography
2024-07-15 20:33:51 -04:00
Allen Golbig
d1de3c0665
removed cces and stigs
2024-07-15 19:52:43 -04:00
Allen Golbig
701e4d6b6a
dev_sequoia
2024-07-15 18:01:42 -04:00
Bob Gendler
52798b62ca
refactor[rules]Update discussion os_camera_disable
...
Updated discussion for os_camera_disable to match Ventura DISA STIG.
2024-04-11 11:20:04 -04:00
Bob Gendler
86eab839ad
Added CCEs
2024-04-04 11:45:48 -04:00
Bob Gendler
042b54310d
refactor[rules] Updated typos
...
Fixed grammar and spacing issues
2024-04-02 11:25:03 -04:00
Bob Gendler
4ca9d995da
refactor[rules] os_anti_virus_installed and timed
...
Removed auto remediation since it cannot occur if SIP is enabled.
Added a note about SIP.
2024-03-25 12:01:57 -04:00
Bob Gendler
168231c297
Merge branch 'dev_sonoma_issue343' into sonoma
2024-03-25 11:18:01 -04:00
Dan Brodjieski
3d0f9fcb8b
Merge branch 'sonoma' into dev_sonoma_issue343
2024-03-25 09:19:52 -04:00
Dan Brodjieski
ee31be4f89
Merge branch 'sonoma' into dev_sonoma_issue292
2024-03-25 09:17:42 -04:00
Allen Golbig
32c3c22447
fixes issue #355
2024-03-07 15:09:30 -05:00
Dan Brodjieski
0811ce6ac3
fix[check]: adjusted awk to not include gz files
2024-03-07 10:42:55 -05:00
Dan Brodjieski
72c1f08792
refactor[rule]: updated check to clarify findings
...
Added some verbiage to describe why it fails.
Issue os_install_log_retention_configure - remediation does not match check #292
2024-02-27 15:28:37 -05:00
Bob Gendler
2ab099bfcd
Dev sonoma issue356 ( #367 )
...
* chore[rules]: updated STIG tags
Removed the stig tag from rules that weren't in the stig.
Added 'srg' tag to rules that had SRG references, but not in stig
Issue #356
* chore[baseline]: updated STIG baseline
* chore[references]: updated CCI and SRG refs
Updated severity where needed too
* fix[rule]: yaml syntax for CCI
* fix[rules]: added missing STIG ODVs
---------
Co-authored-by: Dan Brodjieski <daniel.brodjieski@nasa.gov >
Co-authored-by: Dan Brodjieski <dbrodjieski@icloud.com >
2024-02-26 15:50:02 -05:00
Dan Brodjieski
acf9665d80
Dev sonoma issue344 ( #365 )
...
* fix[rule]: updated to support ODV
Added ODV values to retain legacy values until CIS updates.
Issue #344
* chore[rule]: added note about restoring UX
* chore[rule]: added full paths to commands
---------
Co-authored-by: Dan Brodjieski <daniel.brodjieski@nasa.gov >
2024-02-23 13:52:15 -05:00
Allen Golbig
f102dc9a6e
fix[rule] os_setup_assistant_filevault_enforce
...
Removed .js in check
Issue #362
2024-02-23 08:18:23 -05:00
Allen Golbig
d2cd70220a
fixed typo
2024-02-23 08:08:22 -05:00
Dan Brodjieski
88edda81b3
chore[rules]: updated mapping from STIG
2024-01-29 13:54:13 -05:00
Dan Brodjieski
701ed9bec0
chore[rules]: updates from published STIG
...
added STIG references and updated baselines to support latest release from DISA
2024-01-24 08:16:00 -05:00
Dan Brodjieski
f06782a180
Merge branch 'sonoma' into dev_sonoma_disa
2024-01-23 15:45:21 -05:00
Dan Brodjieski
515de70e43
fix[rule]: more accurate check
...
updated check to better report if user records contain password hints
Issue #343
2024-01-04 11:29:41 -05:00
