Elgato_dark/fleet
1
0
Fork 0
mirror of https://github.com/fleetdm/fleet synced 2026-05-23 00:49:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 106

CIS 6.3.7 (#9767)

Browse source
This commit is contained in:
Sharon Katz 2023-02-09 13:15:21 -05:00 committed by GitHub
parent 0e076a989f
commit c7827cf5b1
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 68 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

31
ee/cis/macos-13/cis-policy-queries.yml
View file

@ -2045,3 +2045,34 @@ spec:
purpose: Informational
tags: compliance, CIS, CIS_Level1, CIS6.3.6
contributors: artemist-work
---
apiVersion: v1
kind: policy
spec:
name: CIS - Ensure Show Full Website Address in Safari Is Enabled (MDM Required)
platforms: macOS
platform: darwin
description: |
Attackers use websites with malicious or unwanted content to exploit the user or the computer. Part of the attack chain is to lure someone to load their content rather than the desired content. In order to reduce the risk in interacting with unwanted content the full website address should always be displayed in Safari.
resolution: |
Graphical Method:
Perform the following steps to set Safari to show full website addresses:
1. Open Safari
2. Select Safari from the menu bar
3. Select Settings
4. Select Security
5. Set Show full website address to enabled
Automated method:
Profile Method:
Create or edit a configuration profile with the following information:
1. The PayloadType string is com.apple.Safari
2. The key to include is ShowFullURLInSmartSearchField
3. The key must be set to:
<true/>
query: |
SELECT 1 from managed_policies WHERE domain = 'com.apple.Safari'
AND name = 'ShowFullURLInSmartSearchField'
AND value = 1;
purpose: Informational
tags: compliance, CIS, CIS_Level1, CIS6.3.7
contributors: sharon-fdm

37
ee/cis/macos-13/test/profiles/6.3.7.mobileconfig Normal file
View file

@ -0,0 +1,37 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDisplayName</key>
<string>test</string>
<key>PayloadType</key>
<string>com.apple.Safari</string>
<key>PayloadIdentifier</key>
<string>com.fleetdm.cis-6.3.7.check</string>
<key>PayloadUUID</key>
<string>A78B534C-0E6D-46C0-97F1-D50178AC5AD0</string>
<key>ShowFullURLInSmartSearchField</key>
<true/>
</dict>
</array>
<key>PayloadDescription</key>
<string>test</string>
<key>PayloadDisplayName</key>
<string>Ensure Show Full Website Address in Safari Is Enabled</string>
<key>PayloadIdentifier</key>
<string>com.fleetdm.cis-6.3.7</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>5A412D8E-5951-42A3-95ED-BD82AD6D3038</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>