usnistgov/macos_security
1
0
Fork 0
mirror of https://github.com/usnistgov/macos_security.git synced 2026-03-03 17:02:01 +00:00
Code Issues 21 Actions Packages Projects Releases Wiki Activity
Files
4ef395048e7abc2ea973d71fcdaefa561f8c26ae
macos_security/rules/os
History
Allen Golbig cc5e8e2a80 principle
2021-07-22 15:45:00 -04:00
..
os_access_control_mobile_devices.yaml
replaced n/a cce with real cce
2021-07-13 15:35:52 -04:00
os_airdrop_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_allow_info_passed.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_anti_virus_installed.yaml
Added SI-2 to SIP and removed from 800-53 baselines for STIG specific rule
2021-07-14 11:39:52 -04:00
os_apple_mobile_file_integrity_enforce.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_appleid_prompt_disable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_application_sandboxing.yaml
CCEs added
2021-07-15 16:03:23 -04:00
os_asl_log_files_owner_group_configure.yaml
manual tag removed
2021-07-22 14:21:20 -04:00
os_asl_log_files_permissions_configure.yaml
manual tag removed
2021-07-22 14:21:20 -04:00
os_auth_peripherals.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_authenticated_root_enable.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_bonjour_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_calendar_app_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_camera_disable.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_certificate_authority_trust.yaml
more rev5 edits
2021-07-07 11:12:42 -04:00
os_change_security_attributes.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_config_data_install_enforce.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_continuous_monitoring.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_crypto_audit.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_directory_services_configured.yaml
removed CM-6
2021-07-14 13:32:18 -04:00
os_enforce_access_restrictions.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_error_message.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_facetime_app_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_fail_secure_state.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_filevault_authorized_users.yaml
wording changes, reference update, manual tag added
2021-07-13 12:36:45 -04:00
os_filevault_autologin_disable.yaml
added a note about apple silicon
2021-06-30 15:18:59 -04:00
os_firewall_default_deny_require.yaml
more rev5 impacted changes
2021-03-22 17:01:17 -04:00
os_firewall_log_enable.yaml
more rev5 impacted changes
2021-03-22 17:01:17 -04:00
os_firmware_password_require.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_gatekeeper_enable.yaml
added rev5 references and modified baseline files
2021-04-08 17:02:52 -04:00
os_gatekeeper_rearm.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_grant_privs.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_handoff_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_hbss_installed.yaml
replaced n/a cce with real cce
2021-07-13 15:35:52 -04:00
os_home_folders_secure.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_httpd_disable.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_icloud_storage_prompt_disable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_identify_non-org_users.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_implement_cryptography.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_implement_memory_protection.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_information_validation.yaml
CCEs added
2021-07-15 16:03:23 -04:00
os_internet_accounts_prefpane_disable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_ir_support_disable.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_isolate_security_functions.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_limit_auditable_events.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_limit_dos_attacks.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_limit_gui_sessions.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_logical_access.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_logoff_capability_and_message.yaml
Rev5 updates to controls
2021-03-12 16:11:57 -05:00
os_mail_app_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_malicious_code_prevention.yaml
replaced n/a cce with real cce
2021-07-13 15:35:52 -04:00
os_managed_access_control_points.yaml
CCEs added
2021-07-15 16:03:23 -04:00
os_map_pki_identity.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_mdm_require.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_messages_app_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_mfa_network_access.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_mfa_network_non-priv.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_newsyslog_files_owner_group_configure.yaml
manual tag removed
2021-07-22 14:21:20 -04:00
os_newsyslog_files_permissions_configure.yaml
manual tag removed
2021-07-22 14:21:20 -04:00
os_nfsd_disable.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_non_repudiation.yaml
CCEs added
2021-07-15 16:03:23 -04:00
os_nonlocal_maintenance.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_notify_account_created.yaml
R5 N/A based off changes in R5 text
2021-07-09 09:25:38 -04:00
os_notify_account_disabled.yaml
R5 N/A based off changes in R5 text
2021-07-09 09:25:38 -04:00
os_notify_account_enable.yaml
R5 N/A based off changes in R5 text
2021-07-09 09:25:38 -04:00
os_notify_account_modified.yaml
R5 N/A based off changes in R5 text
2021-07-09 09:25:38 -04:00
os_notify_account_removal.yaml
R5 N/A based off changes in R5 text
2021-07-09 09:25:38 -04:00
os_notify_unauthorized_baseline_change.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_obscure_password.yaml
IA-5 and IA-5(1) R5
2021-03-29 14:20:15 -04:00
os_parental_controls_enable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_password_autofill_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_password_proximity_disable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_password_sharing_disable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_peripherals_identify.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_pii_deidentification.yaml
Prepping for Rev5 release
2021-07-22 10:08:07 -04:00
os_pii_quality_control.yaml
Prepping for Rev5 release
2021-07-22 10:08:07 -04:00
os_policy_banner_loginwindow_enforce.yaml
added full path for tr
2021-06-23 17:20:29 -04:00
os_policy_banner_ssh_configure.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_policy_banner_ssh_enforce.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_predictable_behavior.yaml
Added SI-10(3) r5
2021-07-09 09:22:42 -04:00
os_prevent_priv_execution.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_prevent_priv_functions.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_prevent_unauthorized_disclosure.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_privacy_principle_minimization.yaml
principle
2021-07-22 15:45:00 -04:00
os_privacy_setup_prompt_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_prohibit_remote_activation_collab_devices.yaml
fixed mispelling, updated fix text, removed inherent tag
2021-07-21 10:42:57 -04:00
os_protect_dos_attacks.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_provide_automated_account_management.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_provide_disconnect_remote_access.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_reauth_devices_change_authenticators.yaml
baseline tags added
2021-07-21 16:50:19 -04:00
os_reauth_privilege.yaml
more rev5 impacted changes
2021-03-22 17:01:17 -04:00
os_reauth_users_change_authenticators.yaml
baseline tags added
2021-07-21 16:50:19 -04:00
os_remote_access_methods.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_removable_media_disable.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_remove_software_components_after_updates.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00
os_required_crypto_module.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_root_disable.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_screensaver_loginwindow_enforce.yaml
matching to big_sur branch
2021-07-09 11:21:14 -04:00
os_secure_boot_verify.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_secure_enclave.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_secure_name_resolution.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_separate_functionality.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_sip_enable.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_siri_prompt_disable.yaml
CM-7(1) added
2021-07-15 15:18:33 -04:00
os_ssh_fips_140_ciphers.yaml
more rev5 impacted changes
2021-03-22 17:01:17 -04:00
os_ssh_fips_140_macs.yaml
more rev5 impacted changes
2021-03-22 17:01:17 -04:00
os_ssh_server_alive_count_max_configure.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_ssh_server_alive_interval_configure.yaml
AC-12, AC-2(5) added
2021-07-15 09:20:22 -04:00
os_sshd_client_alive_count_max_configure.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_sshd_client_alive_interval_configure.yaml
AC-12, AC-2(5) added
2021-07-15 09:20:22 -04:00
os_sshd_fips_140_ciphers.yaml
Added the note back
2021-07-14 13:34:58 -04:00
os_sshd_fips_140_macs.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_sshd_key_exchange_algorithm_configure.yaml
replaced n/a cce with real cce
2021-07-13 15:35:52 -04:00
os_sshd_login_grace_time_configure.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_sshd_permit_root_login_configure.yaml
removed some text from the fix
2021-06-24 12:53:17 -04:00
os_store_encrypted_passwords.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_sudoers_tty_configure.yaml
Rev5 reviewing and additions
2021-04-05 15:22:58 -04:00
os_system_read_only.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_terminate_session.yaml
Added r5 N/A
2021-07-09 09:21:34 -04:00
os_tftpd_disable.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_time_server_enabled.yaml
added baseline tags
2021-07-21 16:20:46 -04:00
os_touchid_prompt_disable.yaml
baseline tags added for r5
2021-07-02 13:40:41 -04:00
os_unique_identification.yaml
added rev5 references and modified baseline files
2021-04-08 17:02:52 -04:00
os_unlock_active_user_session_disable.yaml
rev5 baseline tags added and rev4 re-organized
2021-03-11 10:07:37 -05:00
os_user_app_installation_prohibit.yaml
Rev5s added
2021-03-22 10:56:00 -04:00
os_uucp_disable.yaml
Note: to NOTE: so notes show appropriately
2021-07-21 11:25:26 -04:00
os_verify_remote_disconnection.yaml
initial rev5 conversion again
2021-03-10 13:43:23 -05:00