2016_JNUC_Security_Reporting_Compliance
2016_JNUC_Security_Reporting_Compliance copied to clipboard
Missing Values cause unexpected results
I've just finished watching your JNUC video and trying out the code. I'm not running the remediation script until I've done a bunch of testing, but I'm finding that the Audit Compliance test is simply failing on a few of the tests as the plist doesn't exist or the key within the plist doesn't exist.
I was going to fork this and make the changes needed to account for missing files and keypairs, but then thought I'd better ask you first if this would be the right action or is this an intentional "thing".
Example log:
Script result: rm: /Library/Application Support/SecurityScoring/org_audit: No such file or directory 2016-11-15 09:12:19.117 defaults[59100:2438721] The domain/default pair of (/Library/Preferences/com.apple.commerce, AutoUpdate) does not exist /Library/Application Support/JAMF/tmp/SEC_2_Security_Audit_Compliance: line 88: [: =: unary operator expected 2016-11-15 09:12:19.179 defaults[59102:2438730] The domain/default pair of (/Library/Preferences/com.apple.SoftwareUpdate, ConfigDataInstall) does not exist /Library/Application Support/JAMF/tmp/SEC_2_Security_Audit_Compliance: line 101: [: =: unary operator expected 2016-11-15 09:12:19.199 defaults[59104:2438738] The domain/default pair of (/Library/Preferences/com.apple.commerce, AutoUpdateRestartRequired) does not exist /Library/Application Support/JAMF/tmp/SEC_2_Security_Audit_Compliance: line 114: [: =: unary operator expected 2.1.1 passed 2.3.1 passed 2.3.2 passed 2.3.4 passed 2.4.1 passed Print: Entry, ":NAT:AirPort:Enabled", Does Not Exist Print: Entry, ":NAT:Enabled", Does Not Exist Print: Entry, ":NAT:PrimaryInterface:Enabled", Does Not Exist 2.4.3 passed Print: Entry, ":PrefKeyServicesEnabled", Does Not Exist 2.4.8 passed 2.6.3 passed /Library/Application Support/JAMF/tmp/SEC_2_Security_Audit_Compliance: line 362: [: : integer expression expected 2.8 passed 2.10 passed 4.1 passed 2016-11-15 09:12:20.499 defaults[59200:2439016] The domain/default pair of (com.apple.systemuiserver, menuExtras) does not exist 4.4 passed 4.5 passed 4.6 passed 5.1.2 passed 5.1.3 passed 5.7 passed 5.8 passed 5.9 passed 5.10 passed 5.18 passed 2016-11-15 09:15:19.366 defaults[59434:2440443] The domain/default pair of (/Library/Preferences/SystemConfiguration/com.apple.smb.server, AllowGuestAccess) does not exist 6.1.4 passed 2016-11-15 09:15:19.425 defaults[59436:2440454] The domain/default pair of (/Users/alpha/Library/Preferences/com.apple.finder, AppleShowAllExtensions) does not exist 2016-11-15 09:15:19.453 defaults[59438:2440463] The domain/default pair of (/Users/alpha/Library/Preferences/com.apple.Safari, AutoOpenSafeDownloads) does not exist 6.3 passed
This is running on an El Capitan 10.11.6
Thanks for the help