Release

Author: robertgendler

CHANGELOG.adoc

@@ -0,0 +1,162 @@
+# Changelog
+
+This document provides a high-level view of the changes to the macOS Security Compliance Project.
+
+## [Sequoia, Revision 2.0] - 2025-07-01
+* Rules
+  * Added Rules
+    * os_mail_smart_reply_disable
+    * os_notes_transcription_disable
+    * os_notes_transcription_summary_disable
+    * os_safari_reader_summary_disable
+    * os_sshd_per_source_penalties_configure
+  * Modified Rules
+    * os_genmoji_disable.yaml
+    * os_implement_cryptography.yaml
+    * os_iphone_mirroring_disable.yaml
+    * os_mail_summary_disable.yaml
+    * os_nfsd_disable.yaml
+    * os_parental_controls_enable.yaml
+    * os_password_hint_remove.yaml
+    * os_power_nap_disable.yaml
+    * os_separate_functionality.yaml
+    * os_sleep_and_display_sleep_apple_silicon_enable.yaml
+    * os_sudo_log_enforce.yaml
+    * os_time_server_enabled.yaml
+    * os_unlock_active_user_session_disable
+    * os_writing_tools_disable.yaml
+    * pwpolicy_50_percent.yaml
+    * pwpolicy_history_enforce.yaml
+    * pwpolicy_upper_case_character_enforce.yaml
+    * supplemental_cis_manual.yaml
+    * system_settings_automatic_login_disable.yaml
+    * system_settings_bluetooth_sharing_disable.yaml
+    * system_settings_content_caching_disable.yaml
+    * system_settings_external_intelligence_disable.yaml
+    * system_settings_external_intelligence_sign_in_disable.yaml
+    * system_settings_guest_access_smb_disable.yaml
+    * system_settings_guest_account_disable.yaml
+    * system_settings_improve_assistive_voice_disable.yaml
+    * system_settings_improve_search_disable.yaml
+    * system_settings_internet_sharing_disable.yaml
+    * system_settings_loginwindow_loginwindowtext_enable.yaml
+    * system_settings_loginwindow_prompt_username_password_enforce.yaml
+    * system_settings_media_sharing_disabled.yaml
+    * system_settings_password_hints_disable.yaml
+    * system_settings_printer_sharing_disable.yaml
+    * system_settings_rae_disable.yaml
+    * system_settings_remote_management_disable.yaml
+    * system_settings_screen_sharing_disable.yaml
+    * system_settings_screensaver_ask_for_password_delay_enforce.yaml
+    * system_settings_screensaver_timeout_enforce.yaml
+    * system_settings_siri_disable.yaml
+    * system_settings_siri_listen_disable.yaml
+    * system_settings_smbd_disable.yaml
+    * system_settings_software_update_enforce.yaml
+    * system_settings_ssh_disable.yaml
+    * system_settings_time_server_configure.yaml
+    * system_settings_time_server_enforce.yaml
+    * system_settings_wake_network_access_disable.yaml
+  * Bug Fixes
+* Baselines
+    * Updated CIS to v1.1.0
+    * Updated DISA STIG Ver 1, Rel 3
+* Scripts
+  * generate_guidance
+    * bug fixes
+  * generate_scap.py
+    * bug fixes
+
+## [Sequoia, Revision 1.1] - 2024-12-16
+
+* Rules
+  * Added Rules
+    * os_iphone_mirroring_disable
+    * os_mail_summary_disable
+    * os_photos_enhanced_search_disable
+    * system_settings_external_intelligence_disable
+    * system_settings_external_intelligence_sign_in_disable
+  * Modified Rules
+    * os_sleep_and_display_sleep_apple_silicon_enable
+    * os_sudo_log_enforce
+    * os_world_writable_library_folder_configure
+    * os_password_autofill_disable
+    * pwpolicy_alpha_numeric_enforce
+    * pwpolicy_custom_regex_enforce
+    * pwpolicy_lower_case_character_enforce.yaml
+    * pwpolicy_max_lifetime_enforce
+    * pwpolicy_minimum_lifetime_enforce
+    * pwpolicy_history_enforce
+    * pwpolicy_account_lockout_timeout_enforce
+    * pwpolicy_account_lockout_enforce
+    * pwpolicy_prevent_dictionary_words
+    * pwpolicy_simple_sequence_disable
+    * pwpolicy_special_character_enforce
+    * pwpolicy_upper_case_character_enforce.yaml
+    * system_settings_improve_assistive_voice_disable
+  * Removed Rules
+    * system_settings_cd_dvd_sharing_disable
+  * Bug Fixes
+* Baselines
+  * Added DISA STIG v1r1
+  * Added CIS Level (Draft -> Final)
+  * Updated CNSSI-1253
+
+## [Sequoia, Revision 1.0] - 2024-09-12
+
+* Rules
+  * Added Rules
+    * os_genmoji_disable
+    * os_image_generation_disable
+    * os_iphone_mirroring_disable
+    * os_sudo_log_enforce
+    * os_writing_tools_disable
+  * Modified Rules
+    * os_anti_virus_installed
+    * os_gatekeeper_enable
+    * os_ssh_fips_compliant
+    * system_settings_firewall_enable
+    * system_settings_firewall_stealth_mode_enable
+    * system_settings_gatekeeper_identified_developers_allowed
+    * system_settings_media_sharing_disabled
+    * DDM Support
+      * auth_pam_login_smartcard_enforce
+      * auth_pam_su_smartcard_enforce
+      * auth_pam_sudo_smartcard_enforce
+      * auth_ssh_password_authentication_disable
+      * os_external_storage_restriction
+      * os_network_storage_restriction
+      * os_policy_banner_ssh_enforce
+      * os_sshd_channel_timeout_configure
+      * os_sshd_client_alive_count_max_configure
+      * os_sshd_client_alive_interval_configure
+      * os_sshd_fips_compliant
+      * os_sshd_login_grace_time_configure
+      * os_sshd_permit_root_login_configure
+      * os_sshd_unused_connection_timeout_configure
+      * os_sudo_timeout_configure
+      * pwpolicy_account_lockout_enforce
+      * pwpolicy_account_lockout_timeout_enforce
+      * pwpolicy_alpha_numeric_enforce
+      * pwpolicy_custom_regex_enforce
+      * pwpolicy_history_enforce
+      * pwpolicy_max_lifetime_enforce
+      * pwpolicy_minimum_length_enforce
+      * pwpolicy_simple_sequence_disable
+      * pwpolicy_special_character_enforce
+    * Removed Rules
+      * os_firewall_log_enable
+      * os_gatekeeper_rearm
+      * os_safari_popups_disabled
+    * Bug Fixes
+* Baselines
+  * Modified existing baselines
+  * Updated 800-171 to Revision 3
+* Scripts
+  * generate_guidance
+    * Support for Declarative Device Management (DDM)
+    * Added support for severity
+  * generate_baseline
+  * generate_mappings
+  * generate_scap
+    * Added support for severity

CHANGELOG.md

@@ -1,12 +1,12 @@
-== Contributing
+## Contributing
 
-=== Engage
-Contribute new content, share feedback and ask questions about resources in the repository using the https://github.com/usnistgov/macos_security/issues/new[Issues feature].
+### Engage
+Contribute new content, share feedback and ask questions about resources in the repository using the [Issues feature](https://github.com/usnistgov/macos_security/issues/new).
 
-=== Operating Rules
+### Operating Rules
 These operating rules describe and govern NIST’s management of this repository and contributors’ responsibilities. NIST reserves the right to modify this policy at any time.
 
-=== Criteria for Contributions and Feedback
+### Criteria for Contributions and Feedback
 This is a moderated platform. NIST will only accept contributions that are contributed per the terms of the license file. Contributors may submit links or materials for hosting in the repository. Upon submission, materials will be public and considered publicly available information, unless noted in the license file.
 
 NIST reserves the right to reject, remove, or edit any contribution or feedback, including anything that:
@@ -15,17 +15,17 @@ NIST reserves the right to reject, remove, or edit any contribution or feedback,
 * contains abusive or vulgar content, spam, hate speech, personal attacks, or similar content;
 * is clearly "off topic";
 * makes unsupported accusations;
-* includes personally identifiable or business identifiable information according to Department of Commerce Office of Privacy and Open Government (http://www.osec.doc.gov/opog/privacy/PII_BII.html[guidelines]; or,
+* includes personally identifiable or business identifiable information according to Department of Commerce Office of Privacy and Open Government [guidelines](http://www.osec.doc.gov/opog/privacy/PII_BII.html); or,
 * contains .exe or .jar file types.
 
 _These file types will not be hosted in the NIST repository; instead, NIST may link to these if hosted elsewhere._
 
-=== Contributor Responsibilities
+### Contributor Responsibilities
 NIST also reserves the right to reject or remove contributions from the repository if the contributor fails to carry out any of the following responsibilities:
 
 * following the contribution instructions;
 * responding to feedback from other repository users in a timely manner;
 * responding to NIST representatives in a timely manner;
 * keeping contributions and contributor GitHub username up to date
 
-*GitHub Help:* If you're having trouble with these instructions, and need more information about GitHub, pull requests, and issues, visit GitHub's Help https://help.github.com/categories/collaborating-with-issues-and-pull-requests/[page].
+**GitHub Help:** If you're having trouble with these instructions, and need more information about GitHub, pull requests, and issues, visit GitHub's Help [page](https://help.github.com/categories/collaborating-with-issues-and-pull-requests/).