Bob Gendler 91e4e75095 refactor[rules] Updated sshd checks ...

Removed sshd -G, replaced with sshd -T

2025-09-15 15:03:08 -04:00

..

os_access_control_mobile_devices.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_airdrop_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_allow_info_passed.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_anti_virus_installed.yaml

refactor[rules]: cleanup to sync across branches

2025-04-08 11:06:14 -04:00

os_appleid_prompt_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_application_sandboxing.yaml

merge PR 408 and 409 changes

2024-08-27 10:47:48 -04:00

os_asl_log_files_owner_group_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_asl_log_files_permissions_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_auth_peripherals.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_authenticated_root_enable.yaml

fix typo

2025-04-08 11:09:18 -04:00

os_blank_bluray_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_blank_cd_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_blank_dvd_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_bluray_read_only_enforce.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_bonjour_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_burn_support_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_calendar_app_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_camera_disable.yaml

Updated os_camera_disable discussion

2024-04-18 11:00:13 -04:00

os_cd_read_only_enforce.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_certificate_authority_trust.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_change_security_attributes.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_config_data_install_enforce.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_config_profile_ui_install_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_continuous_monitoring.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_crypto_audit.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_directory_services_configured.yaml

refactor[rules/baselines] DISA STIG

2023-05-04 13:43:18 -04:00

os_disk_image_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_dvdram_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_efi_integrity_validated.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_enforce_access_restrictions.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_erase_content_and_settings_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_error_message.yaml

refactor[rules]: removed STIG referencing

2022-10-18 18:57:37 -04:00

os_ess_installed.yaml

refactor[rules/baselines] DISA STIG

2023-05-04 13:43:18 -04:00

os_facetime_app_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_fail_secure_state.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_filevault_authorized_users.yaml

Merge branch 'dev_ventura_stig' into ventura

2023-06-22 12:47:18 -04:00

os_filevault_autologin_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_firewall_default_deny_require.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_firewall_log_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_firmware_password_require.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_gatekeeper_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_gatekeeper_rearm.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_grant_privs.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_guest_folder_removed.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_handoff_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_hibernate_mode_destroyfvkeyonstandby_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_hibernate_mode_intel_enable.yaml

refactor[rules]: cleanup to sync across branches

2025-04-08 11:06:14 -04:00

os_home_folders_default.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_home_folders_secure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_httpd_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_icloud_storage_prompt_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_identify_non-org_users.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_implement_cryptography.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_implement_memory_protection.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_information_validation.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_install_log_retention_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_ir_support_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_isolate_security_functions.yaml

Merge branch 'dev_ventura_cmmc' into ventura

2023-06-22 12:23:41 -04:00

os_library_validation_enabled.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_limit_auditable_events.yaml

refactor[rules]: removed STIG referencing

2022-10-18 18:57:37 -04:00

os_limit_dos_attacks.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_limit_gui_sessions.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_logical_access.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_logoff_capability_and_message.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_mail_app_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_malicious_code_prevention.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_managed_access_control_points.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_map_pki_identity.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_mdm_require.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_messages_app_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_mfa_network_access.yaml

refactor[rules]: removed STIG referencing

2022-10-18 18:57:37 -04:00

os_mfa_network_non-priv.yaml

refactor[rules]: removed STIG referencing

2022-10-18 18:57:37 -04:00

os_mobile_file_integrity_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_newsyslog_files_owner_group_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_newsyslog_files_permissions_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_nfsd_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_non_repudiation.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_nonlocal_maintenance.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_notify_account_created.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_notify_account_disabled.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_notify_account_enable.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_notify_account_modified.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_notify_account_removal.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_notify_unauthorized_baseline_change.yaml

Merge branch 'dev_ventura_cmmc' into ventura

2023-06-22 12:23:41 -04:00

os_obscure_password.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_parental_controls_enable.yaml

refactor[rules] Updated 800-171r3 references

2025-04-04 10:23:16 -04:00

os_password_autofill_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_password_hint_remove.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_password_proximity_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_password_sharing_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_peripherals_identify.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_pii_deidentification.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_pii_quality_control.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_policy_banner_loginwindow_enforce.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_policy_banner_ssh_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_policy_banner_ssh_enforce.yaml

refactor[rules] Updated sshd checks

2025-09-15 15:03:08 -04:00

os_power_nap_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_power_nap_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_predictable_behavior.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_prevent_priv_execution.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_prevent_priv_functions.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_prevent_unauthorized_disclosure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_privacy_principle_minimization.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_privacy_setup_prompt_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_prohibit_remote_activation_collab_devices.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_protect_dos_attacks.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_provide_automated_account_management.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_provide_disconnect_remote_access.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_rapid_security_response_allow.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_rapid_security_response_removal_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_reauth_devices_change_authenticators.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_reauth_privilege.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_reauth_users_change_authenticators.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_recovery_lock_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_remote_access_methods.yaml

refactor[rules]: removed STIG referencing

2022-10-18 18:57:37 -04:00

os_removable_media_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_remove_software_components_after_updates.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_required_crypto_module.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_root_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_safari_advertising_privacy_protection_enable.yaml

refactor[rules] CCEs added

2022-12-06 12:17:16 -05:00

os_safari_open_safe_downloads_disable.yaml

fix[rules] updated cis refs

2022-11-04 08:49:19 -04:00

os_safari_prevent_cross-site_tracking_enable.yaml

refactor[rules] CCEs added

2022-12-06 12:17:16 -05:00

os_safari_show_full_website_address_enable.yaml

refactor[rules] CCEs added

2022-12-06 12:17:16 -05:00

os_safari_show_status_bar_enabled.yaml

added missing cce

2024-12-16 10:16:40 -05:00

os_safari_warn_fraudulent_website_enable.yaml

recfactor[rule] Mispelling

2023-06-26 10:42:58 -04:00

os_screensaver_loginwindow_enforce.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_screensaver_timeout_loginwindow_enforce.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_secure_boot_verify.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_secure_enclave.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_secure_name_resolution.yaml

Removed old cnssi tag

2023-06-22 12:51:58 -04:00

os_separate_functionality.yaml

refactor[rules] Updated 800-171r3 references

2025-04-04 10:23:16 -04:00

os_show_filename_extensions_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_sip_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_siri_prompt_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_skip_screen_time_prompt_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_skip_unlock_with_watch_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_sleep_and_display_sleep_apple_silicon_enable.yaml

Fixing os_sleep_and_display_sleep_apple_silicon_enable numbers and verbiage.

2024-12-11 15:33:03 -05:00

os_software_update_deferral.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_ssh_fips_compliant.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_ssh_server_alive_count_max_configure.yaml

refactor[rules]: cleanup to sync across branches

2025-04-08 11:06:14 -04:00

os_ssh_server_alive_interval_configure.yaml

refactor[rules]: cleanup to sync across branches

2025-04-08 11:06:14 -04:00

os_sshd_client_alive_count_max_configure.yaml

refactor[rules] Updated sshd checks

2025-09-15 15:03:08 -04:00

os_sshd_client_alive_interval_configure.yaml

refactor[rules] Updated sshd checks

2025-09-15 15:03:08 -04:00

os_sshd_fips_compliant.yaml

refactor[rules] Updated sshd checks

2025-09-15 15:03:08 -04:00

os_sshd_login_grace_time_configure.yaml

refactor[rules] Updated sshd checks

2025-09-15 15:03:08 -04:00

os_sshd_permit_root_login_configure.yaml

refactor[rules] Updated sshd checks

2025-09-15 15:03:08 -04:00

os_store_encrypted_passwords.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_sudo_timeout_configure.yaml

refactor[rules] Typos

2024-04-02 11:29:39 -04:00

os_sudoers_timestamp_type_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_system_read_only.yaml

cnssi tags added

2023-05-04 13:53:17 -04:00

os_system_wide_applications_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_terminal_secure_keyboard_enable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_terminate_session.yaml

refactor[rules] Typos

2024-04-02 11:29:39 -04:00

os_tftpd_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_time_offset_limit_configure.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_time_server_enabled.yaml

Merge branch 'dev_ventura_issue469' into ventura

2025-04-14 11:51:07 -04:00

os_touchid_prompt_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_unique_identification.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_unlock_active_user_session_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_user_app_installation_prohibit.yaml

fix[rules] added back deprecation messages

2023-08-16 15:23:45 -04:00

os_uucp_disable.yaml

refactor[rules/includes] 800-171r3

2024-09-04 15:18:50 -04:00

os_verify_remote_disconnection.yaml

refactor[rules] Typos

2024-04-02 11:29:39 -04:00

os_world_writable_library_folder_configure.yaml

sync os_world_writable_library with sequoia

2024-11-11 07:23:05 -05:00

os_world_writable_system_folder_configure.yaml

refactor[rules]: cleanup to sync across branches

2025-04-08 11:06:14 -04:00