John Mahlman

os_software_update_deferral gives fails finding if 'enforcedSoftwareUpdateDelay' key is not set

1

### Summary The `os_software_update_deferral` check will fail if there is no setting for "enforcedSoftwareUpdateDelay". ### Steps to reproduce 1. Run check on device without the 'enforcedSoftwareUpdateDelay' key set. ### Operating...

Removing a rule from guidance will not remove the rule from audit file

2

### Summary When removing rules from a custom baseline, the affected rule is not removed from the audit file if the compliance check and fix were run on a machine....

pwpolicy_account_lockout_enforce should check if value is less than or equal

1

### Problem to solve When setting `pwpolicy_account_lockout_enforce` the check should accept if the number is less than the number passed. ### Intended users Anyone using the `pwpolicy_account_lockout_enforce` control. ### Further...

Disabled launchctl reports incorrectly (Ventura)

1

### Summary MacOS Ventura changes how launchctl reports disabled services. Previously, the check `/bin/launchctl print-disabled system` for a service would return `=> true` if it was disabled. Ventura has changed...

I have the app deployed in heroku, I updated a lot of the required packages to their latest versions. I am able to get the service to start and it...

Update to Address CVE-2022-41903 and CVE-2022-23521

1

Is there any plan to update the binaries to 2.39.1 in order to address CVE-2022-41903 and CVE-2022-23521? https://www.bleepingcomputer.com/news/security/git-patches-two-critical-remote-code-execution-security-flaws/

As of Jamf Pro 10.49.0, the management account information has been removed from the computer inventory record. This has also resulted in the removal of the mass-action to edit the...

system_settings_siri_listen_disable result check incorrect

3

### Summary The control `system_settings_siri_listen_disable` is looking for the result of `0` when it should be expecting `false`. ### Steps to reproduce 1. Create a profile with the `system_settings_siri_listen_disable` settings...