usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-06-10 19:10:30 +01:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity
Files
dev_tahoe_updates
macos_security/rules/os
History
Bob Gendler f224f11c8d
Some checks failed
Spell Check / spellcheck (push) Has been cancelled
Details
Merge pull request #658 from nancysangani/feat/issue-528-safari-allow-javascript 
Add os_safari_allow_javascript_disable rule
2026-04-06 14:54:41 -04:00
..
os_access_control_mobile_devices.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_account_modification_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_airdrop_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_allow_info_passed.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_anti_virus_installed.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_appleid_prompt_disable.yaml
refactor[rules]: update checks for SkipSetupItems
2025-09-11 10:22:28 -04:00
os_application_sandboxing.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_asl_log_files_owner_group_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_asl_log_files_permissions_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_auth_peripherals.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_authenticated_root_enable.yaml
modified check to not use mdmclient
2026-03-26 11:49:32 -04:00
os_blank_bluray_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_blank_cd_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_blank_dvd_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_bluray_read_only_enforce.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_bonjour_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_burn_support_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_calendar_app_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_camera_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_cd_read_only_enforce.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_certificate_authority_trust.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_change_security_attributes.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_config_data_install_enforce.yaml
Remove os_config_data_install_enforce
2026-01-27 20:53:20 +01:00
os_config_profile_ui_install_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_continuous_monitoring.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_crypto_audit.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_dictation_disable.yaml
refactor[rules] Updates to check/fix/ddm
2026-03-26 12:15:51 -04:00
os_directory_services_configured.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_disk_image_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_dvdram_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_enforce_access_restrictions.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_erase_content_and_settings_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_error_message.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_ess_installed.yaml
Merge branch 'sequoia' into dev_tahoe
2025-09-08 13:46:16 -04:00
os_external_storage_access_defined.yaml
Updated O-maatregel-nummers
2026-01-20 13:12:10 +01:00
os_facetime_app_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_fail_secure_state.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_filevault_authorized_users.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_filevault_autologin_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_firewall_default_deny_require.yaml
fixed check
2026-03-26 09:17:30 -04:00
os_firmware_password_require.yaml
Fixed title, removed stig tag
2025-12-12 10:09:27 -05:00
os_gatekeeper_enable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_genmoji_disable.yaml
refactor[rules] Updates to check/fix/ddm
2026-03-26 12:15:51 -04:00
os_grant_privs.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_guest_folder_removed.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_handoff_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_hibernate_mode_destroyfvkeyonstandby_enable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_hibernate_mode_intel_enable.yaml
fix: Silicon update for SystemProfiler model name
2026-03-26 17:06:58 -07:00
os_home_folders_default.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_home_folders_secure.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_httpd_disable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_icloud_storage_prompt_disable.yaml
refactor[rules]: update checks for SkipSetupItems
2025-09-11 10:22:28 -04:00
os_identify_non-org_users.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_image_playground_disable.yaml
refactor[rules] Updates to check/fix/ddm
2026-03-26 12:15:51 -04:00
os_implement_cryptography.yaml
fix: adjusted specific OS references
2025-09-15 11:04:49 -04:00
os_implement_memory_protection.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_information_validation.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_install_log_retention_configure.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_iphone_mirroring_disable.yaml
fix[rule]: correct typo in fix text
2025-09-12 10:43:44 -04:00
os_ir_support_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_isolate_security_functions.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_library_validation_enabled.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_limit_auditable_events.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_limit_dos_attacks.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_limit_gui_sessions.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_logical_access.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_loginwindow_adminhostinfo_disabled.yaml
refactor[rules]CCEs added
2025-09-09 12:34:27 -04:00
os_logoff_capability_and_message.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_mail_app_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_mail_smart_reply_disable.yaml
Added DDM info
2026-03-28 21:19:30 -04:00
os_mail_summary_disable.yaml
Added DDM info
2026-03-28 21:19:30 -04:00
os_malicious_code_prevention.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_managed_access_control_points.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_map_pki_identity.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_mdm_require.yaml
Updated O-maatregel-nummers
2026-01-20 13:12:10 +01:00
os_messages_app_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_mfa_network_access.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_mfa_network_non-priv.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_mobile_file_integrity_enable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_network_storage_restriction.yaml
chore: fix typos and spelling errors
2025-09-16 10:35:24 -04:00
os_newsyslog_files_owner_group_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_newsyslog_files_permissions_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_nfsd_disable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_non_repudiation.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_nonlocal_maintenance.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_notes_transcription_disable.yaml
Added DDM info
2026-03-28 21:19:30 -04:00
os_notes_transcription_summary_disable.yaml
Added DDM info
2026-03-28 21:19:30 -04:00
os_notify_account_created.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_notify_account_disabled.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_notify_account_enable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_notify_account_modified.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_notify_account_removal.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_notify_unauthorized_baseline_change.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_obscure_password.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_on_device_dictation_enforce.yaml
refactor[rules] Updates to check/fix/ddm
2026-03-26 12:15:51 -04:00
os_parental_controls_enable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_password_autofill_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_password_hint_remove.yaml
fix: correct STIG references
2026-03-18 11:11:03 -04:00
os_password_proximity_disable.yaml
Include BIO 8.27.01 in additional rules
2026-01-27 11:54:50 +01:00
os_password_sharing_disable.yaml
Updated O-maatregel-nummers
2026-01-20 13:12:10 +01:00
os_peripherals_identify.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_photos_enhanced_search_disable.yaml
chore: fix typos and spelling errors
2025-09-16 10:35:24 -04:00
os_pii_deidentification.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_pii_quality_control.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_policy_banner_loginwindow_enforce.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_policy_banner_ssh_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_policy_banner_ssh_enforce.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_power_nap_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_power_nap_enable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_predictable_behavior.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_prevent_priv_execution.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_prevent_priv_functions.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_prevent_unauthorized_disclosure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_privacy_principle_minimization.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_privacy_setup_prompt_disable.yaml
refactor[rules]: update checks for SkipSetupItems
2025-09-11 10:22:28 -04:00
os_prohibit_remote_activation_collab_devices.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_protect_dos_attacks.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_provide_automated_account_management.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_provide_disconnect_remote_access.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_reauth_devices_change_authenticators.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_reauth_privilege.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_reauth_users_change_authenticators.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_recovery_lock_enable.yaml
Sync with sequoia issue #522
2025-08-26 15:07:03 -04:00
os_remote_access_methods.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_removable_media_disable.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_remove_software_components_after_updates.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_required_crypto_module.yaml
fix: adjusted specific OS references
2025-09-15 11:04:49 -04:00
os_root_disable.yaml
refactor[rules] Updates to check/fix/ddm
2026-03-26 12:15:51 -04:00
os_safari_advertising_privacy_protection_enable.yaml
Include BIO 8.27.01 in additional rules
2026-01-27 11:54:50 +01:00
os_safari_allow_javascript_disable.yaml
feat: add os_safari_allow_javascript_disable rule for SC-18 and SC-18(4) (closes #528)
2026-04-06 23:44:07 +05:30
os_safari_clear_history_disable.yaml
chore: fix typos and spelling errors
2025-09-16 10:35:24 -04:00
os_safari_open_safe_downloads_disable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_safari_prevent_cross-site_tracking_enable.yaml
Include BIO 8.27.01 in additional rules
2026-01-27 11:54:50 +01:00
os_safari_private_browsing_disable.yaml
refactor[rules]CCEs added
2025-09-09 12:34:27 -04:00
os_safari_reader_summary_disable.yaml
Added DDM info
2026-03-28 21:19:30 -04:00
os_safari_show_full_website_address_enable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_safari_show_status_bar_enabled.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_safari_warn_fraudulent_website_enable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_screensaver_loginwindow_enforce.yaml
refactor[rules] Update moduleName to Tahoe for os_screensaver_loginwindow_enforce
2025-09-09 14:17:04 +02:00
os_screensaver_timeout_loginwindow_enforce.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_secure_boot_verify.yaml
fix: correct STIG references
2026-03-18 11:11:03 -04:00
os_secure_enclave.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_secure_name_resolution.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_separate_functionality.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_setup_assistant_filevault_enforce.yaml
Added required MDM key
2026-04-03 11:48:56 -04:00
os_sip_enable.yaml
Updated O-maatregel-nummers
2026-01-20 13:12:10 +01:00
os_siri_prompt_disable.yaml
refactor[rules]: update checks for SkipSetupItems
2025-09-11 10:22:28 -04:00
os_skip_apple_intelligence_enable.yaml
Update os_skip_apple_intelligence_enable.yaml
2025-09-17 15:14:59 -04:00
os_skip_screen_time_prompt_enable.yaml
Fixed check
2025-09-11 11:07:23 -04:00
os_skip_unlock_with_watch_enable.yaml
refactor[rules]: update checks for SkipSetupItems
2025-09-11 10:22:28 -04:00
os_sleep_and_display_sleep_apple_silicon_enable.yaml
fix: Silicon update for SystemProfiler model name
2026-03-26 17:06:58 -07:00
os_software_update_app_update_enforce.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_software_update_deferral.yaml
Added missing mobileconfig_info
2025-12-11 16:24:55 -05:00
os_ssh_fips_compliant.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_ssh_server_alive_count_max_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_ssh_server_alive_interval_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sshd_channel_timeout_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sshd_client_alive_count_max_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sshd_client_alive_interval_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sshd_fips_compliant.yaml
fixed path
2025-11-07 08:09:42 -05:00
os_sshd_login_grace_time_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sshd_per_source_penalties_configure.yaml
refactor: fix typos and spelling
2025-09-15 10:55:09 -04:00
os_sshd_permit_root_login_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sshd_unused_connection_timeout_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_store_encrypted_passwords.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_sudo_log_enforce.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_sudo_timeout_configure.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_sudoers_timestamp_type_configure.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_supported_operating_system.yaml
Added CCE
2025-12-17 14:17:33 -05:00
os_system_read_only.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_system_wide_applications_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_terminal_secure_keyboard_enable.yaml
Include BIO 8.27.01 in additional rules
2026-01-27 11:54:50 +01:00
os_terminate_session.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_tftpd_disable.yaml
Merge branch 'tahoe' into sequoia
2026-01-06 16:45:21 +01:00
os_time_offset_limit_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_time_server_enabled.yaml
Updated O-maatregel-nummers
2026-01-20 13:12:10 +01:00
os_touchid_prompt_disable.yaml
refactor[rules]: update checks for SkipSetupItems
2025-09-11 10:22:28 -04:00
os_unique_identification.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_unlock_active_user_session_disable.yaml
Add ODV for os_unlock_active_user_session_disable
2026-01-27 20:52:09 +01:00
os_user_app_installation_prohibit.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_uucp_disable.yaml
refactor[rules] Updated check/fix
2025-08-28 11:43:02 -04:00
os_verify_remote_disconnection.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_world_writable_library_folder_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_world_writable_system_folder_configure.yaml
refactor[rules] CCEs added
2025-08-26 13:15:42 -04:00
os_writing_tools_disable.yaml
refactor[rules] Updates to check/fix/ddm
2026-03-26 12:15:51 -04:00