cisagov / ScubaGoggles

SCuBA Security Configuration Baselines and assessment tool for Google Workspace
https://www.cisa.gov/resources-tools/services/secure-cloud-business-applications-scuba-project
Creative Commons Zero v1.0 Universal
129 stars 13 forks source link

Groups 6.1 does not check if new groups are hidden #271

Open mitchelbaker-cisa opened 2 months ago

mitchelbaker-cisa commented 2 months ago

🐛 Summary

Groups 6.1 determines a pass/fail result based on the log event for step 4, "GroupsSharingSettingsProto allow_unlisted_groups", which checks if groups owners can hide groups from the directory. However, we do not account for step 5, "GroupsSharingSettingsProto new_groups_are_unlisted", which checks if newly created groups can be hidden from the directory.

Implementation steps for GWS.GROUPS.6.1v0.1:

GWS.GROUPS.6.1v0.1 Instructions

To configure the settings for Sharing options:

    1. Sign in to the [Google Admin Console](https://admin.google.com/).
    2. Select Apps -> Google Workspace -> Groups for Business.
    3. Select Sharing settings -> Sharing options.
    4. Uncheck the Group owners can hide groups from the directory checkbox.
    5. Ensure that the hide newly created groups from the directory checkbox is not selected.
    6. Select Save.

Expected behavior

NonCompliantOUs6_1 should check if "GroupsSharingSettingsProto new_groups_are_unlisted" equals true/false

Screenshot (77)

mitchelbaker-cisa commented 2 months ago

Relates to #245