Files
macos_security/rules/os/os_library_validation_enabled.yaml
2023-09-14 14:21:06 -04:00

42 lines
776 B
YAML

id: os_library_validation_enabled
title: "Enable Library Validation"
discussion:
Library validation _MUST_ be enabled.
check: |
/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.security.libraryvalidation')\
.objectForKey('DisableLibraryValidation').js
EOS
result:
string: "false"
fix: |
This is implemented by a Configuration Profile.
references:
cce:
- CCE-92814-3
cci:
- N/A
800-53r5:
- N/A
800-53r4:
- N/A
srg:
- N/A
disa_stig:
- N/A
800-171r2:
- N/A
cis:
benchmark:
- N/A
controls v8:
- 2.3
- 2.6
macOS:
- "14.0"
tags:
- cisv8
mobileconfig: true
mobileconfig_info:
com.apple.security.libraryvalidation:
DisableLibraryValidation: false