Shawn Wells

SB-237, a law passed in California, contains the following text: --- (b) Subject to all of the requirements of subdivision (a), if a connected device is equipped with a means...

6.2.12 Ensure users' .netrc Files are not group or world accessible (Scored)

1

Needs rule. Or more ideally, someone could work with CIS to modernize their guidance. Current content does not allow netrc files at all: system/accounts/accounts-restrictions/password_storage/no_netrc_files/rule.yml

5.4.1 Ensure password creation requirements are configured (Scored)

3

Will require breaking down into individual rules

Needs rule

Currently rsyslog_files_permissions only checks /etc/rsyslog.conf. Needs to be extended for /etc/rsyslog.d/ Needed for 4.2.1.3 Ensure rsyslog default file permissions configured (Scored)

Today, NIST is releasing an update for Special Publication (SP) 800-171 Revision 1, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations. This errata update includes minor editorial changes to...

Add multiple people in one command

1

Currently, only one individual can be added at a time, eg `` add `` But sometimes multiple people work on things together. Could the syntax be updated to allow for...

RFE: OpenSCAP Workbench to support 2FA

4

Question from Summit - how to handle 2FA from SCAP Workbench?

OSX installer includes random files/directories

1

The dmg installer includes random files/directories on the installation screen: