usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-20 15:30:25 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity
1,194 Commits 30 Branches 61 Tags
4af03a19dff387402fa767c780ddb5ea311dca98
Commit Graph

291 Commits

Author SHA1 Message Date
Bob Gendler
4af9cdb35d synchronize with sonoma 2023-09-15 15:10:05 -04:00
Bob Gendler
a28f0dd7b9 synchronize across branches 2023-09-15 12:36:15 -04:00
Bob Gendler
415d9bf955 refactor[rules/includes] Updated ODV information 
Fixed odv tag to match baseline tag
Updated mscp_data to match odv/baseline tag
 2023-09-15 12:26:22 -04:00
Bob Gendler
68468219e1 matching scripts between branches 2023-09-14 11:51:11 -04:00
Allen Golbig
7f74915d77 removed old scripts 2023-09-11 12:19:41 -04:00
Bob Gendler
641df4344c refactor[scripts] updated generate_scap 
generate_scap no longer lists oval tests it can't do
if only xccdf is selected
 2023-09-07 13:36:13 -04:00
Bob Gendler
b453ed22fa refactor[scripts]generate_mapping updated for iOS 
- Fixed generate_mapping to account for platform
- Removed hardcoded supplementals
- All supplementals in rules/supplementals added now
 2023-09-06 12:12:18 -04:00
Bob Gendler
ff89dc795d feat[scripts] Added mobile config info to scap gen 
Adds the mobile config info to the SCAP xccdf
 2023-09-01 11:40:40 -04:00
Bob Gendler
1913b89380 fixed title description to match platform 2023-08-31 17:12:31 -04:00
Bob Gendler
fd9d21ee97 feature[scripts] iOS xccdf generation 
Added iOS xccdf generation
Added for mobileconfigs in the fix text to build the XML keys like in the
HTML and PDF
 2023-08-31 16:52:19 -04:00
Dan Brodjieski
ea855e977b refactor[script]: updates for iOS support 2023-08-31 15:41:26 -04:00
Dan Brodjieski
9d19b6e2ee refactor[script]: updates for ios support 2023-08-31 15:14:23 -04:00
Dan Brodjieski
a9292dd5b2 fix[script]: updated version and baseline 2023-08-31 14:24:55 -04:00
Bob Gendler
b80c970ec1 updating generate_scap for ios 2023-08-31 13:00:21 -04:00
Allen Golbig
b762432841 made iOS build 2023-08-31 10:09:15 -04:00
Allen Golbig
09f95f6d4c added scripts from iOS fork 2023-08-31 09:43:11 -04:00
Tim de Jong
abd3b1d186 change removal of public ssh key file (#279) 
The file created was a .pub file so the removal should be .pub and not .public

Co-authored-by: Bob Gendler <robert.gendler@nist.gov>
 2023-08-14 14:49:36 -04:00
Bob Gendler
8e26ccc3b6 updated to prevent crashes 2023-06-26 11:52:32 -04:00
Bob Gendler
fc9d45b03c Merge branch 'dev_ventura_cmmc' into ventura 2023-06-22 12:23:41 -04:00
Bob Gendler
9363ec0798 Merge branch 'dev_ventura_issue250' into ventura 2023-06-20 11:54:10 -04:00
Bob Gendler
fdcc5b5bb9 output redirection fix 2023-05-26 12:20:18 -04:00
Bob Gendler
5e1485e109 added missing double quote 2023-05-26 12:14:17 -04:00
Bob Gendler
ac1be946c0 Fixed &2> with 2&> 2023-05-25 13:31:53 -04:00
Bob Gendler
8ec13ebf92 feat[scripts]ssh-keygen added to compliance script 
Issue #245
Check if sshd -T succeeds, if not, create required keys. Delete keys
after compliance check is complete
 2023-05-04 13:39:10 -04:00
Bob Gendler
fa6711513e Merge branch 'ventura' into dev_ventura_cmmc 2023-04-26 09:55:16 -04:00
Allen Golbig
aafc5fadf4 fix[script] custom pdf logo fix 
added line for custom pdf log
 2023-04-18 12:29:53 -04:00
Dan Brodjieski
7446797079 fix[script]: Added process to base64 logo 
Asciidoctor-pdf 2.3.6 broke creation of our PDF, by
using a base64 of the image inline with the adoc, it
addresses this issue.

Issue  #250
 2023-04-18 12:26:40 -04:00
Bob Gendler
3dc00ce855 Merge branch 'dev_ventura_issue236' into ventura 2023-04-18 11:17:35 -04:00
Bob Gendler
e0971d2c42 Merge branch 'dev_ventura_issue244' into ventura 2023-04-18 10:52:18 -04:00
Erik Winter
83f1c21b68 use absolute path when referencing scutil and awk in compliance script (#239) 2023-04-05 10:22:57 -04:00
Bob Gendler
2f90a2402a [feat] Remove uchg flag from audit_control 
This is to resolve issue #236

Added /usr/bin/chflags nouchg to audit_control
 2023-04-05 10:19:57 -04:00
Bob Gendler
82ff896adb [fix] generate_scap fix from change in sshd check 
Fix added to generate_scap.py due to change in
auth_ssh_password_authentication_disable check using sshd -T.

Now works if using double or single quote around when you're searching for
 2023-04-03 11:39:57 -04:00
Allen Golbig
3a3b8b7d98 Merge branch 'dev_ventura_issue210' into ventura 2023-01-25 14:14:42 -05:00
Allen Golbig
b58e9edbcf fix[script] added timestamp to remediations 
Added timestamp to compliance script when remediating
 2023-01-03 10:20:34 -05:00
Allen Golbig
75eebea1f7 fix[script] cmmc not established benchmark 
Removed cmmc from established benchmarks list
 2022-12-19 16:58:39 -05:00
Dan Brodjieski
9c62d64141 fix[script]: generate_baseline error with tags 
Corrected issue when running generate_baseline.py with
a keyword/tag that wasn't included in mscp_data

generate_baseline.py crash with custom baselines #210
 2022-12-19 13:17:52 -05:00
mahlmanj
318cc09cd3 Updating temaples and scripts 2022-12-19 12:23:46 -05:00
Allen Golbig
ccb2cc398b feat[script] added check/fix/check logic 
Added check/fix/check logic to compliance script
 2022-12-13 12:59:53 -05:00
Allen Golbig
5bf1f70f45 feat[script] Additional Authors 
Sync changes from monterey to support additional authors

Issue #105
 2022-12-01 19:24:34 -05:00
Bob Gendler
f9e2ae76f8 Merge branch 'dev_ventura_references' into ventura 2022-11-29 09:58:23 -05:00
Dan Brodjieski
a9982fcd27 fix[script]: added support for CIS refs 
You can now pass cis, cis_lvl1, cis_lvl2, cisv8
to generate_guidance.py to allow for those
references to be included in the logs.
Also, replaced all instances of /bin/echo
 2022-11-23 08:51:36 -05:00
Bob Gendler
2d89b7af80 [feat] Debug Mode Added 
Debug added to the generated compliance script. Hold down option to
invoke debug while running the script from the command line.

Issue #202
 2022-11-17 11:50:35 -05:00
Bob Gendler
59e0890c95 Added incremental of x 2022-10-20 10:37:20 -04:00
Bob Gendler
8b3bdac7c2 fix [generate_scap] Updated authdb check 
Added oval generation for new authdb check for Ventura
 2022-10-19 14:08:27 -04:00
Bob Gendler
e1573b3dde Fixed logic for system_settings again 2022-10-18 11:12:34 -04:00
Bob Gendler
ab611d16c6 fix[scripts] fix odv in profile creation 
Fixes an issue with parent_value and odv and config profile creation

Issue #174
 2022-10-03 13:35:10 -04:00
Bob Gendler
b83e46ba72 fix[script] generate_baseline -t crash 
Fixes an issue when custom/rules does not exist.

Issue #172
 2022-10-03 13:28:53 -04:00
Allen Golbig
d334ce846a Merge branch 'dev_ventura_issue167' into dev_ventura 2022-09-29 09:15:11 -04:00
Allen Golbig
9a9441b6dd fix[script]: Fixed logic for system_settings 
Fixed logic for system_settings so it no longer creates additional sections in baseline.
 2022-09-20 09:17:53 -04:00
Jorge Escobar
ddc8e8d8e2 Fix issue that caused --compliant and/or --non_compliant to run when not in cli args. (#173) 2022-09-19 14:14:06 -04:00