From 7f5b3cc15ce8d77ae14e0a7a3d32398124a0ff8d Mon Sep 17 00:00:00 2001 From: Noah Talerman <47070608+noahtalerman@users.noreply.github.com> Date: Tue, 21 Dec 2021 08:20:47 -0800 Subject: [PATCH] Update policy template for "Are guest users disabled on macOS devices?" (#3431) * Update policy's `query` by setting `value = 1` instead of `value = 0`. This way, hosts with guest users disabled respond with "Yes". --- frontend/utilities/constants.ts | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/frontend/utilities/constants.ts b/frontend/utilities/constants.ts index 1eb1dbc711..36e0074db6 100644 --- a/frontend/utilities/constants.ts +++ b/frontend/utilities/constants.ts @@ -68,18 +68,18 @@ export const DEFAULT_POLICIES = [ { key: 6, query: - "SELECT 1 FROM managed_policies WHERE domain = 'com.apple.MCX' AND name = 'DisableGuestAccount' AND value = 0 LIMIT 1;", - name: "Are guest users not activated on macOS devices?", + "SELECT 1 FROM managed_policies WHERE domain = 'com.apple.MCX' AND name = 'DisableGuestAccount' AND value = 1 LIMIT 1;", + name: "Are guest users disabled on macOS devices?", description: "Required: You’re already enforcing a policy via Moble Device Management (MDM). Checks to make sure that guest accounts cannot be used to log in to the device without a password.", resolution: - "The following example profile includes a setting to disable automatic login: https://github.com/gregneagle/profiles/blob/fecc73d66fa17b6fa78b782904cb47cdc1913aeb/loginwindow.mobileconfig#L68-L71", + "The following example profile includes a setting to disable guest users: https://github.com/gregneagle/profiles/blob/fecc73d66fa17b6fa78b782904cb47cdc1913aeb/loginwindow.mobileconfig#L68-L71", platform: "darwin", }, { key: 7, query: - "SELECT 1 FROM managed_policies WHERE domain = 'com.apple.Terminal' AND name = 'SecureKeyboardEntry' AND value=1 LIMIT 1;", + "SELECT 1 FROM managed_policies WHERE domain = 'com.apple.Terminal' AND name = 'SecureKeyboardEntry' AND value = 1 LIMIT 1;", name: "Is secure keyboard entry enabled on macOS devices?", description: "Required: You’re already enforcing a policy via Moble Device Management (MDM). Checks to make sure that the Secure Keyboard Entry setting is enabled.",