kickstart references in benchmarks #107

Closed
opened 2026-01-19 18:29:15 +00:00 by michael · 5 comments
Owner

Originally created by @nicolasponce on GitHub.

Hi team,

Lets say kickstart is going away very soon, some of the benchmarks remediations have kickstart referenced,

[rules/system_settings/system_settings_remote_management_disable.yaml]
[rules/system_settings/system_settings_location_services_disable.yaml]
[rules/system_settings/system_settings_location_services_enable.yaml]

Do we need to leverage kickstart here or is there another path?

Originally created by @nicolasponce on GitHub. Hi team, Lets say kickstart is going away very soon, some of the benchmarks remediations have kickstart referenced, [rules/system_settings/system_settings_remote_management_disable.yaml] [rules/system_settings/system_settings_location_services_disable.yaml] [rules/system_settings/system_settings_location_services_enable.yaml] Do we need to leverage kickstart here or is there another path?
Author
Owner

@robertgendler commented on GitHub:

or launchctl list | awk '/com.apple.locationd/ { print $1 }' as root.

@robertgendler commented on GitHub: or `launchctl list | awk '/com.apple.locationd/ { print $1 }'` as root.
Author
Owner

@robertgendler commented on GitHub:

[rules/system_settings/system_settings_remote_management_disable.yaml]

This actually doesn't use launchctl kickstart.

@robertgendler commented on GitHub: [rules/system_settings/system_settings_remote_management_disable.yaml] This actually doesn't use launchctl kickstart.
Author
Owner

@robertgendler commented on GitHub:

Sonoma branch Updated for macOS 14.4.

@robertgendler commented on GitHub: `Sonoma` branch Updated for macOS 14.4.
Author
Owner

@robertgendler commented on GitHub:

We will be updating the location_services to use

pid=$(/bin/ps aux | /usr/bin/awk '/_locationd/,/\/usr\/libexec\/locationd/{print $2;exit}')
kill -9 $pid
@robertgendler commented on GitHub: We will be updating the location_services to use ``` pid=$(/bin/ps aux | /usr/bin/awk '/_locationd/,/\/usr\/libexec\/locationd/{print $2;exit}') kill -9 $pid ```
Author
Owner

@robertgendler commented on GitHub:

@brodjieski fixed it /bin/ps xa | /usr/bin/aw '/\/usr\/libexec\/locationd/ { print $1 }'

@robertgendler commented on GitHub: @brodjieski fixed it `/bin/ps xa | /usr/bin/aw '/\/usr\/libexec\/locationd/ { print $1 }'`
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#107