system_settings_improve_search_disable.yaml mis-identified as a CIS Level 1 control #77

New Issue

michael · 2026-01-19T18:29:09Z

michael commented

2026-01-19 18:29:09 +00:00

Originally created by @ryan-baier-nih on GitHub.

The rule yaml file under the Sequoia branch titled system_settings_improve_search_disable.yaml references the CIS level 1 control 2.19.1. This may have existed in early drafts of the CIS benchmark, but it is not in the recently published version published yesterday, 10/29/24. The below line should be modified.

from this:
cis:
benchmark:
- 2.19.1 (level 1)

to this:
cis:
benchmark:
- N/A

Link to the rule in question:
https://github.com/usnistgov/macos_security/blob/sequoia/rules/system_settings/system_settings_improve_search_disable.yaml

Originally created by @ryan-baier-nih on GitHub. The rule yaml file under the Sequoia branch titled system_settings_improve_search_disable.yaml references the CIS level 1 control 2.19.1. This may have existed in early drafts of the CIS benchmark, but it is not in the recently published version published yesterday, 10/29/24. The below line should be modified. from this: cis: benchmark: - 2.19.1 (level 1) to this: cis: benchmark: - N/A Link to the rule in question: https://github.com/usnistgov/macos_security/blob/sequoia/rules/system_settings/system_settings_improve_search_disable.yaml

michael closed this issue

2026-01-19 18:29:09 +00:00

michael commented

2026-01-19 18:29:10 +00:00

@robertgendler commented on GitHub:

Solved, never closed issue. Closing now.

@robertgendler commented on GitHub: Solved, never closed issue. Closing now.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: usnistgov/macos_security#77