usnistgov / macos_security

macOS Security Compliance Project

usnistgov/macos_security Issues

Changing time server value is not respected, always, in the remediation section
Updated 2 days ago
pwpolicy_force_pin_enable
Closed a month ago
system_settings_system_wide_preferences_configure
Closed a month ago
SyntaxWarning for python string \| with sufficiently new python version
Closed a month ago1
DISA STIG - Text Updates
Closed a month ago
SIP protected services
Closed a month ago2
system_settings_apple_watch_unlock_disable & system_settings_touchid_unlock_disable should not be mapped to AC-11
Closed a month ago2
generate_guidance fails when using `all_rules` on the Sonoma branch
Closed a month ago1
authorizationdb rules
Updated 2 months ago
Feature Proposal: Generate guidance in Markdown format
Updated 2 months ago
Add SFR references to iOS documents
Closed 2 months ago
DISA customer pointed out potential issue with regex in pwpolicy_custom_regex_enforce
Closed 2 months ago12
Add --no-rcs to compliance script
Closed 2 months ago1
system_settings_remote_management_disable avoid undocumented mdmclient
Updated 2 months ago1
os_root_disable alternative implementation
Closed 2 months ago2
Add requirement to review exemptions to smart card login.
Updated 2 months ago2
Rules having both the fix and the profile
Closed 2 months ago1
Different payload type for system_settings_screensaver_timeout_enforce
Updated 2 months ago
Rule: os_password_hint_remove reports wrong for Guest account in the as-is audit script
Closed 2 months ago4
os_world_writable_system_folder_configure new restricted folder
Closed 2 months ago2
os_world_writable_system_folder_configure borken since Sonoma 14.4
Closed 2 months ago2
Set ODV values (and perhaps other things like excluded rules) non-interactively
Updated 2 months ago1
pwpolicy_account_lockout_enforce not presenting expected result in Log
Closed 2 months ago4
kickstart references in benchmarks
Closed 2 months ago5
STIG guidance leads to inconsistent failed password account locking time
Updated 2 months ago3
Update PDF & HTML based on platform
Updated 3 months ago
unable to generate tailored baseline
Closed 3 months ago1
Rules are tagged with 'stig' that do not have STIG References
Closed 3 months ago1
Retain previous finding if check fails
Updated 3 months ago2
os_unlock_active_user_session_disable should be an ODV
Closed 3 months ago
Space missing in $CURRENT_USER code in adoc files
Closed 3 months ago
Add baseline tags to supplemental rules
Closed 3 months ago
Tailored by is missing in PDF output
Closed 3 months ago
os_setup_assistant_filevault_enforce checks for wrong type
Closed 3 months ago1
pwpolicy_custom_regex_enforce fix statement and note
Updated 3 months ago
generate_baseline.py invalid escape sequence
Closed 4 months ago1
os_newsyslog_files_*_configure don't take /etc/newsyslog.d into account
Updated 4 months ago
os_asl_log_files_*_configure are completely broken
Updated 4 months ago
Prohibit execution from /tmp
Closed 5 months ago1
os_mail_app_disable results in annoying popups after every login
Closed 5 months ago1
os_hibernate_mode_apple_silicon_enable checking is broken
Updated 5 months ago
Remove multiple NTP servers from system_settings_time_server_configure.yaml
Closed 5 months ago1
safariAllowPopups doesn't work in Sonoma (and possibly earlier versions)
Updated 5 months ago2
Bug: syslog daemon changes break its usage on macOS 10.13 and above
Closed 5 months ago1
build/cis_lvl1/cis_lvl1_compliance.sh: line 6359: syntax error near unexpected token `fi'
Closed 6 months ago1
os_gatekeeper_enable - Sonoma - Misconfiguration
Closed 6 months ago2
Configuration Profile Generation
Closed 7 months ago
iCloud privacy relay disable not working
Closed 7 months ago4
os_recovery_lock_enable should not have a manual tag
Closed 7 months ago1
feat: support `syspolicy_check` a new feature in Sonoma to determine if the provided macOS application will pass the current running configurations’ system policy.
Closed 8 months ago1