search

ernw / hardening

Repository of Hardening Guides
611 stars 78 forks source link

Lockdown is somewhat outdated #1

Closed csuhta closed 6 years ago

csuhta commented 8 years ago

Minor note, but Lockdown.app has many false-postive/negatives on OS X 10.11.6. It doesn't seem to be updated for El Capitan.

Here are two examples of confusing results for an audit:

jb7iuj04 v9jyd8g4

Traxes commented 8 years ago

sometimes the confusing thing is true. simply because it´s the other way around. for example the second Screenshot checks if the automatic Time and Date setting is off. if not it will display failed. Which would be correct in this scenario.

Input: sudo systemsetup getusingnetworktime Output: Network Time: On

But i couldn´t reproduce the first issue: Input: Traxes$ defaults read com.apple.screensaver askForPassword | grep 1 Output: 1

btw: this is how it works in the background (Yaml config):

- title: "Disable automatic setting of time and date" check_command: | sudo systemsetup getusingnetworktime | grep 'Network Time: Off' fix_command: |sudo systemsetup setusingnetworktime off enabled: true

you can adjust and add your own settings there.

To lookup what command for each setting is exactly executed and checked: https://github.com/SummitRoute/osxlockdown:

Cheers, Traxes

takeshixx commented 7 years ago

Feel free to close the issue if it has been resolved, thanks.

Traxes commented 6 years ago

Closed the issue due to inactivity.