cisagov / ScubaGear

Automation to assess the state of your M365 tenant against CISA's baselines
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
1.76k stars 226 forks source link

Remove policy MS.SHAREPOINT4.2v1 due to Microsoft update to custom scripting settings #1410

Open ahuynhMITRE opened 1 week ago

ahuynhMITRE commented 1 week ago

๐Ÿ—ฃ Description

Microsoft is making updates to the custom scripting configuration options for Sharepoint and OneDrive. The purpose of this PR is to remove the SCB references to these settings and add the policy, date of removal, and rationale to the removedpolicies.md.

This would be useful because as Microsoft rolls out this update, users of ScubaGear will experience errors as a result of the missing setting. This allows the ScubaGear and the SCBs to be update to date with this setting deprecation.

๐Ÿ’ญ Motivation and context

This would be useful because as Microsoft rolls out this update, users of ScubaGear will experience errors as a result of the missing setting. This allows the ScubaGear and the SCBs to be update to date with this setting deprecation.

Closes #1399

๐Ÿงช Testing

N/A currently only an SCB update, code change will be in a follow-up issue and PR.

โœ… Pre-approval checklist

โœ… Pre-merge checklist

โœ… Post-merge checklist

schrolla commented 1 week ago

@ahuynhMITRE Recommend updating the PR title to reference the policy by ID rather than name and change to use imperative voice (i.e. Removal of -> Remove).