Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 00:49:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 106

Add macOS CIS 2.3.3.10 (Media Sharing) (#9666)

Browse source
This commit is contained in:
Artemis Tosini 2023-02-09 12:55:22 -05:00 committed by GitHub
parent 9fa2be0a86
commit 6b50914500
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 79 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
ee/cis/macos-13/cis-policy-queries.yml
View file

@ -529,6 +529,44 @@ spec:
---
apiVersion: v1
kind: policy
spec:
name: CIS - Ensure Media Sharing Is Disabled (MDM Required)
platforms: macOS
platform: darwin
description: |
Starting with macOS 10.15, Apple has provided a control which permits a user to share
Apple downloaded content on all Apple devices that are signed in with the same Apple ID.
This allows users to share downloaded Movies, Music, or TV shows with other
controlled macOS, iOS and iPadOS devices, as well as photos with Apple TVs.
Disabling Media Sharing reduces the remote attack surface of the system
resolution: |
Profile Method:
Ask your administrator to deploy a profile that sets
homeSharingUIStatus, legacySharingUIStatus, and mediaSharingUIStatus to 0
for com.apple.preferences.sharing.SharingPrefsExtension
query: |
SELECT 1 WHERE EXISTS(
SELECT 1 FROM managed_policies WHERE
domain = 'com.apple.preferences.sharing.SharingPrefsExtension' AND
name = 'homeSharingUIStatus' AND
value = '0'
) AND EXISTS (
SELECT 1 FROM managed_policies WHERE
domain = 'com.apple.preferences.sharing.SharingPrefsExtension' AND
name = 'legacySharingUIStatus' AND
value = '0'
) AND EXISTS (
SELECT 1 FROM managed_policies WHERE
domain = 'com.apple.preferences.sharing.SharingPrefsExtension' AND
name = 'mediaSharingUIStatus' AND
value = '0'
);
purpose: Informational
tags: compliance, CIS, CIS_Level1, CIS2.3.3.10
contributors: artemist-work
---
apiVersion: v1
kind: policy
spec:
name: CIS - Ensure Backup Automatically is Enabled If Time Machine Is Enabled (FDA Required)
platforms: macOS

41
ee/cis/macos-13/test/profiles/2.3.3.10.mobileconfig Normal file
View file

@ -0,0 +1,41 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDisplayName</key>
<string>test</string>
<key>PayloadType</key>
<string>com.apple.preferences.sharing.SharingPrefsExtension</string>
<key>PayloadIdentifier</key>
<string>com.fleetdm.cis-2.3.3.10-check</string>
<key>PayloadUUID</key>
<string>DC34D1FA-3D14-4AEA-844B-FDEC49CD73BB</string>
<key>homeSharingUIStatus</key>
<integer>0</integer>
<key>legacySharingUIStatus</key>
<integer>0</integer>
<key>mediaSharingUIStatus</key>
<integer>0</integer>
</dict>
</array>
<key>PayloadDescription</key>
<string>test</string>
<key>PayloadDisplayName</key>
<string>Ensure Media Sharing is Disabled</string>
<key>PayloadIdentifier</key>
<string>com.fleetdm.cis-2.3.3.10</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>9FD8A0FB-2F7C-41C4-A3FB-90E953BCD433</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>