Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update for Big Sur #14

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

nnikolovGC
Copy link

Updates the script to cover v1.1.0 of the CIS benchmark, i.e. the Big Sur version.

nnikolovGC and others added 5 commits May 11, 2021 11:19
* Update Show Bluetooth status in menu bar's number

* Add missing bracket

* Disable Disable Bluetooth Sharing

The check is no longer possible programmatically

* Update Disable Content Caching check

This is only a minor wording change in the output

* Update Enable Gatekeepr's number

* Update Enable Firewall's number

* Update Enable Firewall Stealth Mode's number

* Remove Review Application Firewall Rule

Check is no longer a part of the benchmark

* Update Disable sending diagnostic and usage data to Apple's number

* Remove Pair the remote control infrared receiver if enabled

* Swap 3.3, 3.4 and 3.5 around

* Swap 5.4 and 5.5

* Change System Integrity Protection status to 5.18

* Redirect stderr to devnull for 2.1.1

* Update Limit Ad tracking and personalized Ads

* Update Show Wi-Fi status in menu bar

* Update Ensure http server is not running

* Update SecureKeyboardEntry's number

* Update Wake fo network access's number

* Finish updating Secure Keyboard entry's number

* Add check for Disable Power Nap

* Add Enable Sealed System Volume (SSV)

* Add Enable Library Validation

* Add Enable Location Services

* Add iTerm to SecureKeyboardEntry check

* Fix typos

* Improve usability and update README

* Chmod +x scripts

* Improve README readability

* Remove CIS exception list

The exceptions will depend on our org
These are to be changed per org
#2)

Current version of the docs does not explicitly state this must be run first. Failing to run this script first results in a failure of the following two manual usage steps. This update corrects that.
* Update priorities to match our use case

* Remove commented out lines

Thanks, Greg
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants