jamf / cis-for-macos-high-sierra-cp Goto Github PK

In both 2_Security_Audit_Compliance scripts when checking "5.14 Ensure system is set to hibernate" the line that sets hibernateValue causes an error on Mojave 10.14.

hibernateValue=$(pmset -g | egrep standbydelay | awk '{print $2}')

This is because pmset -g now returns standbydelaylow and standbydelayhigh

It can be fixed by changing the line to

hibernateValue=$(pmset -g | egrep -e "standbydelay " -e standbydelaylow | awk '{print $2}')

The line above works on 10.13 and 10.14

Did This CIS Script is compatible with Catalina

After Audit 5.1.3 from the Security Remediation script was executed, chmod o-w gets now applied to /private/tmp/

This is wrong and applications can then no longer write to the directory and therefore no longer run as intended.

This seems to happen because /private/tmp/ is a symbolic link to /System/Volumes/Data/private/tmp/. And this is on the read-only system partition under Catalina.

Please adjust the script so that this no longer happens. Thanks!

Hello,

I have been trying to understand why there is two file:
2_Security_Audit_Compliance_API.sh
2_Security_Audit_Compliance_ORG.sh

The only real difference is the API one sends the info back to the Jamf Server.
At the moment, all the code is duplicated and there is bugs that have been fixed in the API script that still exit in the ORG script.
ie: c64f11b

This could be combined into one script and a simple if loop that looks for a populated value for JamfProURL which can then be used around the last two curl commands that sends the data to Jamf.

Thanks
Joshua