diff --git a/ee/cis/macos-13/cis-policy-queries.yml b/ee/cis/macos-13/cis-policy-queries.yml index b89ba56166..5cf173a25f 100644 --- a/ee/cis/macos-13/cis-policy-queries.yml +++ b/ee/cis/macos-13/cis-policy-queries.yml @@ -1867,6 +1867,24 @@ spec: --- apiVersion: v1 kind: policy +spec: + name: CIS - Ensure the Guest Home Folder Does Not Exist + platforms: macOS + platform: darwin + description: | + The Guest home folders are unneeded after the Guest account is disabled and could be used inappropriately. + resolution: | + Automated method: + Ask your system administrator to deploy the following script: + /usr/bin/sudo /bin/rm -R /Users/Guest + query: | + SELECT 1 WHERE NOT EXISTS (SELECT * FROM file WHERE path = '/Users/Guest'); + purpose: Informational + tags: compliance, CIS, CIS_Level1, CIS5.10 + contributors: lucasmrod +--- +apiVersion: v1 +kind: policy spec: name: CIS - Ensure Show All Filename Extensions Setting is Enabled platforms: macOS diff --git a/ee/cis/macos-13/test/scripts/CIS_5.10.sh b/ee/cis/macos-13/test/scripts/CIS_5.10.sh new file mode 100755 index 0000000000..044c28ee64 --- /dev/null +++ b/ee/cis/macos-13/test/scripts/CIS_5.10.sh @@ -0,0 +1,3 @@ +#!/bin/bash + +/usr/bin/sudo /bin/rm -R /Users/Guest