cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
1.76k stars 226 forks source link

Code Update: Removal of decommissioning Custom Script SharePoint Online Settings from the rego and yaml files #1400

Open ahuynhMITRE opened 2 weeks ago

ahuynhMITRE commented 2 weeks ago

🐛 Summary

Microsoft is making updates to the custom scripting configuration options for Sharepoint and OneDrive. The purpose of this issue is to determine if we need to remove or revise policies MS.SHAREPOINT.4.1v1 and 4.2 based on the changes.

https://techcommunity.microsoft.com/t5/sharepoint/removing-custom-scripting-on-sharepoint-sites/m-p/4055563

As a result of #1216, two separate issues will be created to address this setting. This issue will address the removal of all references of policy group 4, Custom Scripting and its policies to include the baselines and rego.

Why does this work belong in this project?

This would be useful because as Microsoft rolls out this update, users of ScubaGear will experience errors as a result of the missing setting. This allows the ScubaGear and the SCBs to be update to date with this setting deprecation.

Implementation notes

Removal of all references to SharePoint policy group 4: custom scripting and its policies in baselines and rego.

Acceptance criteria

How do we know when this work is done?