kristovatlas/osx-config-check issues and pull requests

#50 - organization: define criteria for required/recommended/experimental configs

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research

#49 - UI enhancement: prompt user [Y/n] when about to perform a required fix that requires sudo privs

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:low

#49 - UI enhancement: prompt user [Y/n] when about to perform a required fix that requires sudo privs

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:low

#48 - Evaluate these Safari configurations for checking

Issue - State: open - Opened by kristovatlas over 8 years ago - 6 comments
Labels: enhancement, priority:low

#47 - Disable iCloud

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research, priority:medium

#47 - Disable iCloud

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research, priority:medium

#46 - enhancement: audit keychain for non-default SSL certificates

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research, priority:medium

#46 - enhancement: audit keychain for non-default SSL certificates

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research, priority:medium

#45 - if only one thing out of several (user, network interface, etc.) is config broken attempt fix on only one

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:low

#45 - if only one thing out of several (user, network interface, etc.) is config broken attempt fix on only one

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:low

#44 - IPv6 disabling sometimes does not stick after logging in/out

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: bug, research, priority:medium

#44 - IPv6 disabling sometimes does not stick after logging in/out

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: bug, research, priority:medium

#43 - enhancement: lock down google chrome

Issue - State: open - Opened by kristovatlas over 8 years ago - 8 comments
Labels: enhancement, research, priority:medium

#43 - enhancement: lock down google chrome

Issue - State: open - Opened by kristovatlas over 8 years ago - 8 comments
Labels: enhancement, research, priority:medium

#42 - enhancement: disable printer sharing

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: enhancement, research, priority:low

#42 - enhancement: disable printer sharing

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: enhancement, research, priority:low

#41 - Enhancement: Allow HJson file to specify a failure state to avoid running check command with sudo unnecessarily

Issue - State: closed - Opened by kristovatlas over 8 years ago - 2 comments
Labels: enhancement, priority:medium

#41 - Enhancement: Allow HJson file to specify a failure state to avoid running check command with sudo unnecessarily

Issue - State: closed - Opened by kristovatlas over 8 years ago - 2 comments
Labels: enhancement, priority:medium

#40 - review osxlockdown for configs

Issue - State: closed - Opened by kristovatlas over 8 years ago - 6 comments
Labels: enhancement, priority:medium

#40 - review osxlockdown for configs

Issue - State: closed - Opened by kristovatlas over 8 years ago - 6 comments
Labels: enhancement, priority:medium

#39 - Enhancement: Consider removing `regex match` type

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: enhancement, priority:low

#39 - Enhancement: Consider removing `regex match` type

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: enhancement, priority:low

#38 - Bug: warning about sudo_command printed multiple times when checking if fix worked

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: bug, priority:low

#38 - Bug: warning about sudo_command printed multiple times when checking if fix worked

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: bug, priority:low

#37 - when sudo_command executed, warning printed

Pull Request - State: closed - Opened by kristovatlas over 8 years ago

#37 - when sudo_command executed, warning printed

Pull Request - State: closed - Opened by kristovatlas over 8 years ago

#36 - bug: no explanation provided to user when prompted for password for `sudo_command`

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: bug, priority:high

#36 - bug: no explanation provided to user when prompted for password for `sudo_command`

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: bug, priority:high

#35 - Bug: some configurations don't stick between logins

Issue - State: open - Opened by kristovatlas over 8 years ago - 4 comments
Labels: bug, priority:high

#35 - Bug: some configurations don't stick between logins

Issue - State: open - Opened by kristovatlas over 8 years ago - 4 comments
Labels: bug, priority:high

#34 - Write audit to log

Pull Request - State: closed - Opened by kristovatlas over 8 years ago - 1 comment

#33 - Enhancement: Write results of audit to log file

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:high

#32 - update README

Pull Request - State: closed - Opened by kristovatlas over 8 years ago

#31 - add pre-commit to convert HJSON to JSON

Pull Request - State: closed - Opened by kristovatlas over 8 years ago

#30 - Update json new software versions

Pull Request - State: closed - Opened by kristovatlas over 8 years ago

#29 - Try no sudo first

Pull Request - State: closed - Opened by kristovatlas over 8 years ago - 1 comment

#28 - Review these Mac Hardening Guidelines for config

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#27 - Review "The Ultimate OS X Hardening Guide Collection" for config

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#26 - review CIS Apple OSX benchmark doc for configurations

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#25 - review this list for interesting configs

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#24 - enhancement: Clarify limits of the tool in README

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:medium

#23 - decide how to deal with sudo/administrative issues

Issue - State: open - Opened by kristovatlas over 8 years ago - 2 comments
Labels: enhancement, research, priority:high

#22 - config check: Tor is missing or up to date via homebrew

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement

#21 - config check: Tor browser is missing or up to date.

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement

#20 - consider use of privoxy

Issue - State: open - Opened by kristovatlas over 8 years ago - 2 comments
Labels: enhancement, research

#19 - consider checking for blacklist of bad domains in hosts files

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research

#18 - consider adding DNSSEC stuff as experimental config check

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research

#17 - enhancement: at the top, print to the user where they can submit bug reports

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:high

#16 - config check: consider checking for third party app firewalls

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research

#15 - config check: allow apps downloaded from Mac store and identified devs

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: enhancement

#14 - config check: disk encrypted with FileVault

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: enhancement

#13 - config check: automatic updates are configured

Issue - State: open - Opened by kristovatlas over 8 years ago - 1 comment
Labels: enhancement

#12 - OS-X-Security-and-Privacy-Guide

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#11 - enhancement: add field to hjson that specifies text displayed to user before prompting for fix

Issue - State: closed - Opened by kristovatlas over 8 years ago - 2 comments
Labels: enhancement, priority:high

#10 - enhancement: check that SIP is enabled

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement

#9 - enhancement: check osx version

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement

#8 - can this three-profile configuration for chrome be checked?

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#7 - review configuration checks in osxlockdown

Issue - State: closed - Opened by kristovatlas over 8 years ago - 1 comment
Labels: research

#6 - consider running dylib hijack scanner as a config check

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, research

#5 - review this list of commands for interesting configs to check

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: research

#4 - enhancement: avoid sudo when possible

Issue - State: closed - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:high

#3 - config to consider: check gpg is up to date

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement

#2 - Add private directory where people can drop HJSON and/or JSON configs for their private use

Issue - State: open - Opened by kristovatlas over 8 years ago
Labels: enhancement, priority:medium

#1 - Must be executable on stock OSX machines with very little user setup

Issue - State: open - Opened by kristovatlas over 8 years ago - 3 comments
Labels: enhancement, priority:low

GitHub / kristovatlas/osx-config-check issues and pull requests