usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 05:53:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

os_hibernate_mode_enable Missing hibernatemode (and spelling error) #209

New Issue
Closed
opened 2026-01-19 18:29:39 +00:00 by michael · 1 comment
michael commented 2026-01-19 18:29:39 +00:00
Owner
Copy Link

Originally created by @jmahlman on GitHub.

Originally assigned to: @robertgendler on GitHub.

Summary

The rule os_hibernate_mode_enable is missing the actual setting for hibernatemode. There is also a spelling error in the discussion.

Operating System version

Big Sur, Monterey, ventura

Intel or Apple Silicon

Both

What is the current bug behavior?

The rule does not set the hibernatemode to 25 as outlined in the CIS Benchmark.
The spelling error in the discussion: "instate" should be instant"

What is the expected correct behavior?

For all Macs, hibernatemode should be set to 25.

Relevant logs and/or screenshots

https://workbench.cisecurity.org/sections/1447545/recommendations/2326248

Possible fixes

Spelling error:

  • Update line 6 of the check to NOTE: Hibernate mode will disable instant wake on Apple Silicon laptops.

Hibernate mode:

  • After lines 40 and 42, add the following command: /usr/bin/pmset -a hibernatemode 25
Originally created by @jmahlman on GitHub. Originally assigned to: @robertgendler on GitHub. <!--- Please read this! Before opening a new issue, make sure to search for keywords in the issues filtered by the "regression" or "bug" label and verify the issue you're about to submit isn't a duplicate. ---> ### Summary The rule `os_hibernate_mode_enable` is missing the actual setting for `hibernatemode`. There is also a spelling error in the discussion. ### Operating System version Big Sur, Monterey, ventura ### Intel or Apple Silicon Both ### What is the current *bug* behavior? The rule does not set the `hibernatemode` to 25 as outlined in the CIS Benchmark. The spelling error in the discussion: "instate" should be instant" ### What is the expected *correct* behavior? For all Macs, `hibernatemode` should be set to 25. ### Relevant logs and/or screenshots https://workbench.cisecurity.org/sections/1447545/recommendations/2326248 ### Possible fixes Spelling error: - Update line 6 of the check to ` NOTE: Hibernate mode will disable instant wake on Apple Silicon laptops.` Hibernate mode: - After lines 40 and 42, add the following command: `/usr/bin/pmset -a hibernatemode 25`
michael commented 2026-01-19 18:29:40 +00:00
Author
Owner
Copy Link

@golbiga commented on GitHub:

merged into ventura and will be checked out into others.

@golbiga commented on GitHub: merged into ventura and will be checked out into others.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#209
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?