usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-02-03 14:03:24 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity

Password enforcement fails with allowPasscodeModification=false #29

New Issue
Closed
opened 2026-01-19 18:28:58 +00:00 by michael · 0 comments
michael commented 2026-01-19 18:28:58 +00:00
Owner
Copy Link

Originally created by @phaninder-scalefusion on GitHub.

Summary

Password-related rules break when the Restrictions payload contains allowPasscodeModification=false.

Steps to reproduce

  1. Deploy a Restrictions payload with allowPasscodeModification=false.
  2. Apply password policy rules.
  3. Observe failures.

Operating System version

(iOS/iPadOS 16 / 17 / 18 and macOS 13 / 14 / 15)

Intel or Apple Silicon

Both

Current behavior

Password enforcement does not work when passcode modification is restricted.

Expected behavior

Either:

  • Password rules should clearly document the dependency on this restriction, OR
  • The compliance check should gracefully handle the restriction.

Possible fix

Add a note in documentation that allowPasscodeModification must not be false for password rules to apply.

Originally created by @phaninder-scalefusion on GitHub. ### Summary Password-related rules break when the Restrictions payload contains `allowPasscodeModification=false`. ### Steps to reproduce 1. Deploy a Restrictions payload with `allowPasscodeModification=false`. 2. Apply password policy rules. 3. Observe failures. ### Operating System version (iOS/iPadOS 16 / 17 / 18 and macOS 13 / 14 / 15) ### Intel or Apple Silicon Both ### Current behavior Password enforcement does not work when passcode modification is restricted. ### Expected behavior Either: - Password rules should clearly document the dependency on this restriction, OR - The compliance check should gracefully handle the restriction. ### Possible fix Add a **note in documentation** that `allowPasscodeModification` must not be `false` for password rules to apply.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
michael
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: usnistgov/macos_security#29
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?