missing EOS in some rules #249

New Issue

michael · 2026-01-19T18:29:48Z

michael commented

2026-01-19 18:29:48 +00:00

Originally created by @bernstei on GitHub.

I was testing dev_big_sur_rule_fixes, and the compliance script that's generated is not runnable. I've narrowed it down to instances like this, where the check script is missing the final EOS, so the resulting zsh script is unparseable.

677888697c/rules/sysprefs/sysprefs_screensaver_ask_for_password_delay_enforce.yaml (L8)

I also found the same issue in sysprefs_screensaver_timeout_enforce. Doing a grep of EOS in all the rule yamls and looking for counts other than 0 or 2 only finds those two files.

Originally created by @bernstei on GitHub. I was testing `dev_big_sur_rule_fixes`, and the compliance script that's generated is not runnable. I've narrowed it down to instances like this, where the `check` script is missing the final `EOS`, so the resulting zsh script is unparseable. https://github.com/usnistgov/macos_security/blob/677888697c6c350569fbead8026bb3bf1c3185ba/rules/sysprefs/sysprefs_screensaver_ask_for_password_delay_enforce.yaml#L8 I also found the same issue in `sysprefs_screensaver_timeout_enforce`. Doing a grep of `EOS` in all the rule yamls and looking for counts other than 0 or 2 only finds those two files.

michael closed this issue

2026-01-19 18:29:48 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: usnistgov/macos_security#249