usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-17 06:12:10 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity
960 Commits 29 Branches 61 Tags
722e6f00a795894ca3175cbb1d709d00e629e924
Commit Graph

960 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Bob Gendler
722e6f00a7 refactor[templates] updated information 
Added additional doc 800-219
Added definition baseline vs benchmark
 2022-10-19 21:47:49 -04:00
Bob Gendler
3515ca5f56 refactor[rules] Removed STIG references 
Removed and fixed STIG and SRG references.
 2022-10-19 21:47:16 -04:00
Bob Gendler
1a4aa58597 refactor[rules] Updated FIPS information 
Updated information on FIPS for macOS Ventura.
 2022-10-19 21:46:25 -04:00
Bob Gendler
fdc6b4b0aa refactor[baselines]: Added more description 
Added description defining as a catalog of rules, not a benchmark.
 2022-10-19 21:44:57 -04:00
Bob Gendler
94b4864f77 refactor[VERSION.yaml] Updated date 2022-10-19 21:44:39 -04:00
Bob Gendler
64e0c2ca8a changed monterey to ventura 2022-10-19 21:08:13 -04:00
Bob Gendler
e3853a8202 removed STIG reference 2022-10-19 21:08:03 -04:00
Bob Gendler
e0699b2ba2 Update README.adoc 2022-10-19 20:57:54 -04:00
Bob Gendler
703de27305 refactor [information] Updates for Ventura release 
* Updated CHANGELOG
* Updated VERSION.yaml
* Updated README
 2022-10-19 20:56:15 -04:00
Bob Gendler
8b3bdac7c2 fix [generate_scap] Updated authdb check 
Added oval generation for new authdb check for Ventura
 2022-10-19 14:08:27 -04:00
Bob Gendler
84405d8db9 refactor[rules] Updates to supplemental_cis_manual 
Updated CIS manual controls to match CIS Ventura benchmark
 2022-10-19 10:41:18 -04:00
Bob Gendler
207d82534c refactor[baselines]: Updated all_rules 
Removed system_settings_location_services_audit rule.
 2022-10-19 10:25:23 -04:00
Bob Gendler
23c93c3294 refactor[baselines]: updated cis_lvl2 baseline 
Removed system_settings_location_services_audit
 2022-10-19 10:24:08 -04:00
Bob Gendler
3d6f7c6f1f refactor[rules] More CIS Ventura Benchmark updates 
* Updates to benchmark numbers in rules
* Removed system_settings_location_services_audit
 2022-10-19 10:21:15 -04:00
Bob Gendler
e807a191c6 refactor [rules] Updated library validation rule 
Removed CIS Benchmark numbers from library validation and removed from
baseline files
 2022-10-18 22:12:39 -04:00
Bob Gendler
64fd989a59 refactor [rules] Updated check to use xmllint 
Updated to use xmllint and read xpath instead of grep | grep
 2022-10-18 21:50:16 -04:00
Bob Gendler
46db94c335 refactor [baselines] Baseline files updated 
Updated baseline files with new rules
 2022-10-18 21:28:10 -04:00
Bob Gendler
86ad1f3fb2 refactor [rules] Updated check/fix 
New check and fix wrote for system_settings_system_wide_preferences_configure.
This is required for Ventura for System Settings to work properly.
 2022-10-18 21:19:55 -04:00
Dan Brodjieski
fead101e4b refactor[rules]: removed STIG referencing 
Removed references to the STIG until it is released.
 2022-10-18 18:57:37 -04:00
Bob Gendler
2434a22cdb refactor [includes] Added additional domain 
Added additional payload domain com.apple.locationmenu
 2022-10-18 17:20:33 -04:00
Bob Gendler
1e2d1d0ba1 refactor [rules] Updates to match CIS Ventura Benchmark 
Updated rule files
Updated baseline files
 2022-10-18 16:37:30 -04:00
Allen Golbig
0ab1cdcd69 refactor[rule] updated supplemental_cis_manual 
Updated supplemental_cis_manual
 2022-10-18 16:27:38 -04:00
Bob Gendler
6524c4ff54 refactor [rules] Updates to CIS Ventura Benchmark 
* Changed numbering to match CIS Ventura Benchmark numbers.
* Added system_settings_location_services_menu_enforce
 2022-10-18 16:13:12 -04:00
Bob Gendler
9aa5f221ef refactor [rules] Updated CIS Benchmark Numbers 
Updated CIS Benchmark Numbers to match 4 - Network Configurations
 2022-10-18 12:15:38 -04:00
Bob Gendler
f27a508565 refactor [rules] Updated CIS Benchmark numbering 
Updated benchmark numbers to match CIS Ventura baseline draft
 2022-10-18 12:10:21 -04:00
Allen Golbig
e15a64711e refactor[rule]: cis updates for ventura (swu) 
Updated swu rules to match updated cis numbering
 2022-10-18 12:02:57 -04:00
Bob Gendler
e1573b3dde Fixed logic for system_settings again 2022-10-18 11:12:34 -04:00
Bob Gendler
9e53ed64ba refactor [rules] Removed STIG tags and ODV 
Removed stig baseline file
Removed stig tag from rules
Removed stig odv from rules
Removed old way of hiding and disabling system preference panes
 2022-10-18 11:07:54 -04:00
Bob Gendler
a9096c8f91 refactor [rule] Removed reference to MRT 
Changed wording - XProtect to XProtect Remediator and removed references to MRT.
 2022-10-13 13:40:48 -04:00
Allen Golbig
56eb0d764d fix[baseline]: removed audit_flags_configure 
Removed audit_flags_configure from all_rules.yaml
 2022-10-06 08:45:45 -04:00
Bob Gendler
7c7aefb50e minor fix with stderr to stdout 2022-10-05 17:05:55 -04:00
Bob Gendler
f8af1f24b7 fix [rules] system_wide_preferences_configure 
Fixed system_wide_preferences_configure to add shared key if not found.

Match PR #177
 2022-10-05 13:41:06 -04:00
Bob Gendler
ab611d16c6 fix[scripts] fix odv in profile creation 
Fixes an issue with parent_value and odv and config profile creation

Issue #174
 2022-10-03 13:35:10 -04:00
Bob Gendler
b83e46ba72 fix[script] generate_baseline -t crash 
Fixes an issue when custom/rules does not exist.

Issue #172
 2022-10-03 13:28:53 -04:00
Allen Golbig
bbd924a9b4 refactor[rule]: system_settings_ssh_disable 
Added >/dev/null to fix in case already disabled.
 2022-09-29 17:58:15 -04:00
Allen Golbig
aea1451373 fix[rule]: Fixed system_settings_ssh_disable 
Fixed logic for system_settings_ssh_disable and added note.
 2022-09-29 12:56:00 -04:00
Allen Golbig
d334ce846a Merge branch 'dev_ventura_issue167' into dev_ventura 2022-09-29 09:15:11 -04:00
Bob Gendler
e4ab4945ec refactor[rules/baselines]cis updates 
Added cis_lvl2,cisv8 to additional audit rules
Updated cisv8 baseline and cis_lvl2 baseline
 2022-09-22 14:29:40 -04:00
Bob Gendler
66c0372215 refactor[rules] Updated language and check 
Updated check for ventura. Removed reference to MRT
 2022-09-22 14:04:20 -04:00
Bob Gendler
ccb6b0400c refactor[rules] Reassigned and removed rule 
Assigned cislvl1 and cislvl2 to audit_flags_fm_failed_configure
Removed audit_flags_configure
 2022-09-22 14:03:05 -04:00
Bob Gendler
16bf58f49d refactor[smartcards] Added info on ignoreARD key 
Created information in supplemental and authorization header on the
ignoreARD key for smartcards and screen sharing and screen recording.
 2022-09-20 16:20:13 -04:00
Allen Golbig
9a9441b6dd fix[script]: Fixed logic for system_settings 
Fixed logic for system_settings so it no longer creates additional sections in baseline.
 2022-09-20 09:17:53 -04:00
Bob Gendler
43e8a86b67 Merge branch 'ventura' into dev_ventura 2022-09-19 15:20:02 -04:00
Bob Gendler
12e2698746 refactor[rules] - updated tags and references 
Removed tags and references from non stig rules
 2022-09-19 15:19:02 -04:00
Bob Gendler
6ab3e1c867 refactor[rules] - updated tags and references 
Removed tags and references from non stig rules
 2022-09-19 15:16:15 -04:00
Bob Gendler
fe9abf867b Merge branch 'dev_ventura' into ventura 2022-09-19 14:14:45 -04:00
Jorge Escobar
ddc8e8d8e2 Fix issue that caused --compliant and/or --non_compliant to run when not in cli args. (#173) 2022-09-19 14:14:06 -04:00
Bob Gendler
d291e84939 Merge branch 'dev_ventura' of https://github.com/usnistgov/macos_security into dev_ventura 2022-09-19 14:05:54 -04:00
Bob Gendler
6a3d17f453 refactor[generate_scap] checks for new checks 
Added ability to check the new way for sudo -V and
for systempreferences DisabledSystemSettings
 2022-09-19 14:03:59 -04:00
Allen Golbig
38fce8b5a1 refactor[rule]: Updated Changelog and Baselines 
Updated Changelog, icloud_appleid_system_settings_disable, & baselines
 2022-09-19 13:07:12 -04:00