CIS-Script
CIS-Script copied to clipboard
mvdbent
Modified CISBenchmark.sh to allow for Ventura Line 26 - added && [[ "$osVersion" != "13."* ]] Added 3 lines (lines 277-279) elif [[ "$osVersion" = "13."* ]]; then echo "***...
https://github.com/usnistgov/macos_security/blob/main/rules/os/os_safari_advertising_privacy_protection_enable.yaml Can we add new OrgScore 6.3.6? ``` #!/bin/zsh # shellcheck shell=bash script_dir=$(dirname ${0:A}) projectfolder=$(dirname $script_dir) source "${projectfolder}/Header.sh" CISLevel="1" audit="6.3.6 Ensure Advertising Privacy Protection in Safari Is Enabled (Automated)" orgScore="OrgScore6_3_6"...
New CIS require audit retention is 60d or 5G https://github.com/usnistgov/macos_security/blob/main/rules/audit/audit_retention_configure.yaml Current config: 60d or 1G New Config: 60d or 5G
line 1703 # If organizational score is 1 or true, check status of client if [[ "${auditResult}" == "1" ]]; then if [[ "$osVersion" == "12."* ]]; then I'm not...
"If" statement syntax error in line 30 change From: `if [[ "$t2Check" == "1" ]] then` to `if [[ "$t2Check" == "1" ]]; then`
When running the Assemble.sh I get: `Assemble.sh: line 48: setopt: command not found` Then when I run CISBenchmarkScript.sh I get: ``` *** Security report started - Thu Sep 29 16:21:34...
looks like the check is done to get the value of standbydelaylow and then verify if this is either not set of greater than 600 The remediation is to set...
The current code check for 2.3.2 appears to check whether the Hot Corners are managed, but not what value the corner is set to. `if [[ "${prefIsManaged}" != "6" ]]...
