Bob Gendler
fdcc5b5bb9
output redirection fix
2023-05-26 12:20:18 -04:00
Bob Gendler
5e1485e109
added missing double quote
2023-05-26 12:14:17 -04:00
Bob Gendler
ac1be946c0
Fixed &2> with 2&>
2023-05-25 13:31:53 -04:00
Bob Gendler
8ec13ebf92
feat[scripts]ssh-keygen added to compliance script
...
Issue #245
Check if sshd -T succeeds, if not, create required keys. Delete keys
after compliance check is complete
2023-05-04 13:39:10 -04:00
Bob Gendler
3dc00ce855
Merge branch 'dev_ventura_issue236' into ventura
2023-04-18 11:17:35 -04:00
Bob Gendler
e0971d2c42
Merge branch 'dev_ventura_issue244' into ventura
2023-04-18 10:52:18 -04:00
Erik Winter
83f1c21b68
use absolute path when referencing scutil and awk in compliance script ( #239 )
2023-04-05 10:22:57 -04:00
Bob Gendler
2f90a2402a
[feat] Remove uchg flag from audit_control
...
This is to resolve issue #236
Added /usr/bin/chflags nouchg to audit_control
2023-04-05 10:19:57 -04:00
Bob Gendler
82ff896adb
[fix] generate_scap fix from change in sshd check
...
Fix added to generate_scap.py due to change in
auth_ssh_password_authentication_disable check using sshd -T.
Now works if using double or single quote around when you're searching for
2023-04-03 11:39:57 -04:00
Allen Golbig
3a3b8b7d98
Merge branch 'dev_ventura_issue210' into ventura
2023-01-25 14:14:42 -05:00
Allen Golbig
b58e9edbcf
fix[script] added timestamp to remediations
...
Added timestamp to compliance script when remediating
2023-01-03 10:20:34 -05:00
Dan Brodjieski
9c62d64141
fix[script]: generate_baseline error with tags
...
Corrected issue when running generate_baseline.py with
a keyword/tag that wasn't included in mscp_data
generate_baseline.py crash with custom baselines #210
2022-12-19 13:17:52 -05:00
Allen Golbig
ccb2cc398b
feat[script] added check/fix/check logic
...
Added check/fix/check logic to compliance script
2022-12-13 12:59:53 -05:00
Allen Golbig
5bf1f70f45
feat[script] Additional Authors
...
Sync changes from monterey to support additional authors
Issue #105
2022-12-01 19:24:34 -05:00
Bob Gendler
f9e2ae76f8
Merge branch 'dev_ventura_references' into ventura
2022-11-29 09:58:23 -05:00
Dan Brodjieski
a9982fcd27
fix[script]: added support for CIS refs
...
You can now pass cis, cis_lvl1, cis_lvl2, cisv8
to generate_guidance.py to allow for those
references to be included in the logs.
Also, replaced all instances of /bin/echo
2022-11-23 08:51:36 -05:00
Bob Gendler
2d89b7af80
[feat] Debug Mode Added
...
Debug added to the generated compliance script. Hold down option to
invoke debug while running the script from the command line.
Issue #202
2022-11-17 11:50:35 -05:00
Bob Gendler
59e0890c95
Added incremental of x
2022-10-20 10:37:20 -04:00
Bob Gendler
8b3bdac7c2
fix [generate_scap] Updated authdb check
...
Added oval generation for new authdb check for Ventura
2022-10-19 14:08:27 -04:00
Bob Gendler
e1573b3dde
Fixed logic for system_settings again
2022-10-18 11:12:34 -04:00
Bob Gendler
ab611d16c6
fix[scripts] fix odv in profile creation
...
Fixes an issue with parent_value and odv and config profile creation
Issue #174
2022-10-03 13:35:10 -04:00
Bob Gendler
b83e46ba72
fix[script] generate_baseline -t crash
...
Fixes an issue when custom/rules does not exist.
Issue #172
2022-10-03 13:28:53 -04:00
Allen Golbig
d334ce846a
Merge branch 'dev_ventura_issue167' into dev_ventura
2022-09-29 09:15:11 -04:00
Allen Golbig
9a9441b6dd
fix[script]: Fixed logic for system_settings
...
Fixed logic for system_settings so it no longer creates additional sections in baseline.
2022-09-20 09:17:53 -04:00
Jorge Escobar
ddc8e8d8e2
Fix issue that caused --compliant and/or --non_compliant to run when not in cli args. ( #173 )
2022-09-19 14:14:06 -04:00
Bob Gendler
6a3d17f453
refactor[generate_scap] checks for new checks
...
Added ability to check the new way for sudo -V and
for systempreferences DisabledSystemSettings
2022-09-19 14:03:59 -04:00
Dan Brodjieski
879275b619
fix[script]: Addresses string replacement in fix
...
generate_guidance.py was not substituting | characters in the fix field
correctly when generating the XLS file
2022-09-13 16:00:50 -04:00
Bob Gendler
b219680537
refactor[script]:Update to generate_scap for 13.0
...
Added a condition for ventura launchctl disable checks
Related to Issue #167
2022-09-13 14:51:32 -04:00
Bob Gendler
d4f326c1eb
fixes and more
2022-09-13 11:42:41 -04:00
Bob Gendler
eee2025178
grep or awk with sshd -T checks
2022-09-12 16:34:23 -04:00
Dan Brodjieski
a6a8c85ae8
pulled in generate_guidance.py changes from monterey
2022-09-07 11:42:13 -04:00
Allen Golbig
902510f569
pulled in generate_baseline changes from monterey
2022-09-07 11:20:21 -04:00
Bob Gendler
291cd7a02a
removed space when system sections section is present in baseline
2022-08-18 12:08:44 -04:00
Henry S
46dc160a82
Add creation date to profill description ( #158 )
2022-08-18 11:35:34 -04:00
Henry S
98039a6f99
simple proposal for issue #152
...
Rearangement of two vars in generate_profiles function would resolve this [issue](https://github.com/usnistgov/macos_security/issues/152 ) and make Profile Display Names specific to payload.
2022-08-17 08:37:36 +02:00
Bob Gendler
1f70933011
new oval checks for updated ssh_config checks and sshd enhanced checks
2022-08-16 21:36:30 -04:00
Bob Gendler
2dc4333fe9
re-order elif
2022-08-11 21:07:29 -04:00
Bob Gendler
1096f6e087
sysprefs or system_settings
2022-08-11 21:01:42 -04:00
Bob Gendler
8a4ff89841
sys_prefs or system_settings
2022-08-11 20:57:37 -04:00
Allen Golbig
e09462386c
os_software_update_deferral gives fales finding if 'enforcedSoftwareUpdateDelay' key is not set
...
Fixes #150
2022-08-09 22:06:23 -04:00
Bob Gendler
17ba38be31
issue #146
2022-08-09 15:25:05 -04:00
Bob Gendler
a24451feab
updated compliance count
2022-08-09 15:18:46 -04:00
Bob Gendler
54cc562444
tailoring fixes
2022-08-09 15:12:04 -04:00
Allen Golbig
63c2c3559d
fixed section names
2022-08-06 14:20:39 -04:00
Allen Golbig
fee8638cc6
more system_settings changes
2022-08-06 12:37:27 -04:00
Allen Golbig
7c8c7de2e8
more system settings
2022-08-04 10:50:12 -04:00
Allen Golbig
720d16bb7c
sysprefs to system_settings
2022-08-04 10:05:03 -04:00
Bob Gendler
6e48e6b031
updated guidance and baseline script
2022-07-29 16:13:34 -04:00
Allen Golbig
210af745f7
fixed parent_value
2022-07-14 08:51:04 -04:00
Allen Golbig
920795111d
added ruby gem changes
2022-07-13 20:35:07 -04:00