usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-02 08:22:07 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity
Files
00a5cec9a767455ddcdee251eae23e1d046fdee7
macos_security/rules/os
History
Dan Brodjieski 8fce5c3a06 updated generate_guidance.py to grab benchmark ODV
2022-04-15 12:54:40 -04:00
..
os_access_control_mobile_devices.yaml
cis restructure begins
2021-12-28 17:02:48 -05:00
os_airdrop_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_allow_info_passed.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_anti_virus_installed.yaml
APPL-12-002070
2022-02-09 13:02:58 -05:00
os_appleid_prompt_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_application_sandboxing.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_asl_log_files_owner_group_configure.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_asl_log_files_permissions_configure.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_auth_peripherals.yaml
cis restructure begins
2021-12-28 17:02:48 -05:00
os_authenticated_root_enable.yaml
fixed cis tags
2021-12-29 11:48:06 -05:00
os_blank_bluray_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_blank_cd_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_blank_dvd_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_bluray_read_only_enforce.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_bonjour_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_burn_support_disable.yaml
new stig rules added. disable bluray,dvdram,cds, and more
2022-02-09 12:28:38 -05:00
os_calendar_app_disable.yaml
added |. fix for compliance script generation
2022-02-10 17:21:53 -05:00
os_camera_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_cd_read_only_enforce.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_certificate_authority_trust.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_change_security_attributes.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_config_data_install_enforce.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_continuous_monitoring.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_crypto_audit.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_directory_services_configured.yaml
Fix for bug issue #107
2022-02-10 20:53:28 -05:00
os_disk_image_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_dvdram_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_efi_integrity_validated.yaml
fixed tag
2022-01-19 20:33:36 -05:00
os_enforce_access_restrictions.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_erase_content_and_settings_disable.yaml
checks updated to jxa checks
2022-02-10 20:47:25 -05:00
os_error_message.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_ess_installed.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_facetime_app_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_fail_secure_state.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_filevault_authorized_users.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_filevault_autologin_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_firewall_default_deny_require.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_firewall_log_enable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_firmware_password_require.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_gatekeeper_enable.yaml
fixed result
2022-02-10 20:59:47 -05:00
os_gatekeeper_rearm.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_grant_privs.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_guest_folder_removed.yaml
fix formatting
2022-02-10 13:46:20 -05:00
os_handoff_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_hibernate_mode_destroyfvkeyonstandby_enable.yaml
updated CIS refs
2022-02-17 16:09:19 -05:00
os_hibernate_mode_enable.yaml
fix formatting
2022-02-10 13:46:20 -05:00
os_home_folders_secure.yaml
Merge branch 'dev_cis_monterey' of https://github.com/usnistgov/macos_security into dev_cis_monterey
2022-02-10 11:56:04 -05:00
os_httpd_disable.yaml
merge corrections from stig to cis
2022-02-10 11:55:56 -05:00
os_icloud_storage_prompt_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_identify_non-org_users.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_implement_cryptography.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_implement_memory_protection.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_information_validation.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_install_log_retention_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_ir_support_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_isolate_security_functions.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_library_validation_enabled.yaml
converted to jxa checks
2022-02-03 16:30:05 -05:00
os_limit_auditable_events.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_limit_dos_attacks.yaml
removed smart quotes
2022-02-08 09:14:11 -05:00
os_limit_gui_sessions.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_logical_access.yaml
more cis
2021-12-28 17:23:43 -05:00
os_logoff_capability_and_message.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_mail_app_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_malicious_code_prevention.yaml
removed smart quotes
2022-02-08 09:14:11 -05:00
os_managed_access_control_points.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_map_pki_identity.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_mdm_require.yaml
more cis
2021-12-28 17:23:43 -05:00
os_messages_app_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_mfa_network_access.yaml
more cis
2021-12-28 17:23:43 -05:00
os_mfa_network_non-priv.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_mobile_file_integrity_enable.yaml
added cis rules
2022-01-12 15:08:58 -05:00
os_newsyslog_files_owner_group_configure.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_newsyslog_files_permissions_configure.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_nfsd_disable.yaml
merge corrections from stig to cis
2022-02-10 11:55:56 -05:00
os_non_repudiation.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_nonlocal_maintenance.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_notify_account_created.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_notify_account_disabled.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_notify_account_enable.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_notify_account_modified.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_notify_account_removal.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_notify_unauthorized_baseline_change.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_obscure_password.yaml
more cis
2021-12-28 17:23:43 -05:00
os_parental_controls_enable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_password_autofill_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_password_hint_remove.yaml
password hint remove
2022-01-13 10:19:27 -05:00
os_password_proximity_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_password_sharing_disable.yaml
removed duplicate cci and srg reference
2022-02-10 21:19:57 -05:00
os_peripherals_identify.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_pii_deidentification.yaml
removed smart quotes
2022-02-08 09:14:11 -05:00
os_pii_quality_control.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_policy_banner_loginwindow_enforce.yaml
updated generate_guidance.py to grab benchmark ODV
2022-04-15 12:54:40 -04:00
os_policy_banner_ssh_configure.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_policy_banner_ssh_enforce.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_predictable_behavior.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_prevent_priv_execution.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_prevent_priv_functions.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_prevent_unauthorized_disclosure.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_privacy_principle_minimization.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_privacy_setup_prompt_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_prohibit_remote_activation_collab_devices.yaml
rule moved to inherent
2021-10-20 09:12:00 -04:00
os_protect_dos_attacks.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_provide_automated_account_management.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_provide_disconnect_remote_access.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_reauth_devices_change_authenticators.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_reauth_privilege.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_reauth_users_change_authenticators.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_recovery_lock_enable.yaml
arch tag and note added
2021-09-17 11:55:04 -04:00
os_remote_access_methods.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_removable_media_disable.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_remove_software_components_after_updates.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_required_crypto_module.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_root_disable.yaml
fixed cis tags
2021-12-29 11:48:06 -05:00
os_safari_open_safe_downloads_disable.yaml
result added
2022-02-03 17:27:49 -05:00
os_screensaver_loginwindow_enforce.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_secure_boot_verify.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_secure_enclave.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_secure_name_resolution.yaml
more rework
2021-12-28 20:31:48 -05:00
os_separate_functionality.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_show_filename_extensions_enable.yaml
updated check and result
2022-01-03 11:15:31 -05:00
os_sip_enable.yaml
Fixed CIS reference
2022-02-18 12:50:50 -05:00
os_siri_prompt_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_skip_screen_time_prompt_enable.yaml
checks updated to jxa checks
2022-02-10 20:47:25 -05:00
os_skip_unlock_with_watch_enable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_ssh_fips_compliant.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_ssh_server_alive_count_max_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_ssh_server_alive_interval_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_sshd_client_alive_count_max_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_sshd_client_alive_interval_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_sshd_fips_140_ciphers.yaml
APPL-12-000054
2022-02-09 12:43:06 -05:00
os_sshd_fips_140_macs.yaml
APPL-12-000055
2022-02-09 12:44:48 -05:00
os_sshd_fips_compliant.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_sshd_key_exchange_algorithm_configure.yaml
Merge branch 'dev_cis_monterey' of https://github.com/usnistgov/macos_security into dev_cis_monterey
2022-02-10 11:56:04 -05:00
os_sshd_login_grace_time_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_sshd_permit_root_login_configure.yaml
srg and disa_stig added for macOS 12
2022-02-08 17:20:14 -05:00
os_store_encrypted_passwords.yaml
more rework
2021-12-28 20:31:48 -05:00
os_sudo_timeout_configure.yaml
odv defaults
2022-04-15 11:26:18 -04:00
os_sudoers_timestamp_type_configure.yaml
removed smart quotes
2022-02-08 09:14:11 -05:00
os_sudoers_tty_configure.yaml
Merge branch 'dev_cis_monterey' of https://github.com/usnistgov/macos_security into dev_cis_monterey
2022-02-10 11:56:04 -05:00
os_system_read_only.yaml
CCEs added
2021-08-30 14:36:29 -04:00
os_system_wide_applications_configure.yml
fix formatting
2022-02-10 13:46:20 -05:00
os_terminal_secure_keyboard_enable.yaml
fixed key value, jxa check
2022-02-03 16:29:53 -05:00
os_terminate_session.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_tftpd_disable.yaml
merge corrections from stig to cis
2022-02-10 11:55:56 -05:00
os_time_offset_limit_configure.yaml
fixed id
2021-12-31 13:50:52 -05:00
os_time_server_enabled.yaml
merge corrections from stig to cis
2022-02-10 11:55:56 -05:00
os_touchid_prompt_disable.yaml
jxa check merge
2022-02-10 12:00:28 -05:00
os_unique_identification.yaml
more rework
2021-12-28 20:31:48 -05:00
os_unlock_active_user_session_disable.yaml
removed duplicate cci and srg reference
2022-02-10 21:19:57 -05:00
os_user_app_installation_prohibit.yaml
fixed jxa
2022-02-10 20:33:11 -05:00
os_uucp_disable.yaml
merge corrections from stig to cis
2022-02-10 11:55:56 -05:00
os_verify_remote_disconnection.yaml
SRGs set to NA
2021-08-30 16:05:22 -04:00
os_world_writable_library_folder_configure.yml
fixed typo
2022-01-20 14:42:50 -05:00
os_world_writable_system_folder_configure.yml
Cleaned up PR
2022-01-20 12:11:04 -05:00