usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 05:53:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

Remediations on audit_control cause chaos if file is missing #166

New Issue
Closed
opened 2026-01-19 18:29:28 +00:00 by michael · 1 comment
michael commented 2026-01-19 18:29:28 +00:00
Owner
Copy Link

Originally created by @brodjieski on GitHub.

If /etc/security/audit_control is missing, the remediation script causes issues with the filesystem as it attempts to modify attributes on system folders.

Affects the following rules:
audit_acls_files_configure.yaml
audit_acls_folders_configure.yaml
audit_files_group_configure.yaml
audit_files_mode_configure.yaml
audit_files_owner_configure.yaml
audit_folder_group_configure.yaml
audit_folder_owner_configure.yaml
audit_folders_mode_configure.yaml

Originally created by @brodjieski on GitHub. If /etc/security/audit_control is missing, the remediation script causes issues with the filesystem as it attempts to modify attributes on system folders. Affects the following rules: audit_acls_files_configure.yaml audit_acls_folders_configure.yaml audit_files_group_configure.yaml audit_files_mode_configure.yaml audit_files_owner_configure.yaml audit_folder_group_configure.yaml audit_folder_owner_configure.yaml audit_folders_mode_configure.yaml
michael commented 2026-01-19 18:29:29 +00:00
Author
Owner
Copy Link

@robertgendler commented on GitHub:

this was merged into main. closing the issue.

@robertgendler commented on GitHub: this was merged into main. closing the issue.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#166
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?