mirror of
https://github.com/fleetdm/fleet
synced 2026-05-18 06:28:40 +00:00
103239105f
This is fixing a misinterpretation of the [CIS document](https://drive.google.com/file/d/1Bq6GSn_wRMp2JKbYsRt51V5BXV1gizDp/view?usp=drive_link) for Macos 15/ In the doc search for: "show full Website". The Audit bash script is: ``` % /usr/bin/sudo /usr/sbin/system_profiler SPConfigurationProfileDataType | /usr/bin/grep ShowFullURLInSmartSearchField | /usr/bin/tr -d ' ' Result on my Mac: ShowFullURLInSmartSearchField = 1; ``` This should be interpreted as 'Any user who has this setting is ok'. Not looking for an empty user. We have 48 other occurrences that we will discuss outside the scope of this issue. QA: Applying the profile for my main user worked. Adding a test user The configuration was applied to it without the need to redeploy the profile. --> Hence, we are good with the way CIS recommends auditing. checking with a query finds both accounts with the proper settign:  # Checklist for submitter If some of the following don't apply, delete the relevant line. <!-- Note that API documentation changes are now addressed by the product design team. --> - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/Committing-Changes.md#changes-files) for more information. |
||
|---|---|---|
| .. | ||
| .keep | ||
| 24083-app-metadata | ||
| 25545-mac-app-sha256 | ||
| 25547-smtp-setup-test-email-warning | ||
| 26674-update-disk-info-docs | ||
| 26693-verify-linux-escrowed-userkey | ||
| 26996-and-28452-skip-webview-popup | ||
| 27085-sync-host-failing-policies-count | ||
| 27233-fix-cursor-alignment-issue | ||
| 27255-hide-script-content-for-saved-scripts | ||
| 27396-win-11-cis-4 | ||
| 27522-installer-encoding | ||
| 27609-user-menu-style | ||
| 27667-fix-TooltipTruncatedText | ||
| 27700-validate-bootstrap-is-distribution-pkg | ||
| 27701-fix-manual-label-with-duplicate-serials | ||
| 27867-fix-chrome-profiles-not-reset-after-reenroll | ||
| 27888-CIS-issue | ||
| 27979-ddm-profile-verification | ||
| 28038-uninstall | ||
| 28099-sha-hash | ||
| 28110-gitOps-mode-add-package-view-yaml | ||
| 28118-clear-gitops-settings | ||
| 28196-SCIM-for-Entra-ID | ||
| 28197-SCIM-for-authentik | ||
| 28205-skip-policies-during-setup-experience | ||
| 28440-deleting-non-managed-gitops-labels | ||
| 28521-host-activity-read-disk-key | ||
| 28532-fix-query-edit-permissinos | ||
| 28560-add-neon-to-linux-platforms | ||
| 28652-copy-button-consistency | ||
| 28699-support-running-scripts-on-host-batches-defined-by-filter | ||
| 28700-add-bulk-execute-by-script | ||
| 28701-batch-script-cancel | ||
| 28762-batch-resend-profile-to-hosts | ||
| 28857-vuln-checks | ||
| 28929-fleet-desktop-errors | ||
| 29042-windows-mdm-query-enhancement | ||
| 29090-cancel-profile-delivery-on-delete | ||
| 29143-add-batch-script-summary-endpoint | ||
| 29197-fma-search | ||
| 29345-new-ubuntus | ||
| issue-23784-turn-off-mdm-iphone-ipad | ||
| issue-28215-allow-fleet-secrets-for-macos-setup-script | ||
| issue-28757-ui-for-profiles-status-and-batch-resend | ||
| issue-28759-ui-for-filter-hosts-by-config-profile-status | ||
| issue-28761-filter-list-hosts-by-profile | ||
| warn-on-save-script | ||