tuxudo / macos_security_compliance
macOS Security Compliance module for MunkiReport.
Installs: 113
Dependents: 0
Suggesters: 0
Security: 0
Stars: 1
Watchers: 1
Forks: 1
Open Issues: 0
Language:Hack
README
Reports on the latest macOS Security Compliance audit as part of the macOS Security Compliance project.
Configuration
Baseline
By default MunkiReport will collect information on the latest baseline audit file located in /Library/Preferences/org.$baseline.audit.plist. It is possible to specify the baseline by setting the macos_security_compliance_baseline key in the MunkiReport domain using a profile or the following command.
sudo defaults write /Library/Preferences/MunkiReport.plist macos_security_compliance_baseline cis_lvl1
Table Schema
- last_compliance_check - BIGINT - Timestamp of when the compliance audit last ran
- baseline - VARCHAR(255) - Baseline of the processed audit file
- compliant - VARCHAR(255) - Percentage of compliance
- fails - INT(11) - Rules failed
- passes - INT(11) - Rules passed
- exempt - INT(11) - Rules exempted
- total - INT(11) - Total checked rules
- compliance_json - MediumTEXT - JSON files containing audit results