macOS Security Compliance Files

What's Changed

• Fixes base64 test for system_settings_loginwindow_loginwindowtext_enable
• Fixes checks for OpenSSH 10.5p1 which is included in macOS 27.2.
• Added rules (os_admin_group_membership_defined, os_mcx_disable, os_ssh_pqc_configure, os_sshd_pqc_configure, os_messages_summary_disable)
• Updated fix/check in multiple rules
• Improved custom reference rendering in HTML, PDF and Markdown
• Added Dutch BIO information for macOS 27
• Updated finalized CIS Benchmark for macOS 27 and iOS 27
• Added iOS 27 DISA STIG

Pull Requests

• rules: fix malformed macOS 26.0 check for system_settings_critical_update_install_enforce by @mgajdar in https://github.com/usnistgov/macos_security/pull/799
• Add ADOC table parsing and additional authors to HTML template by @brodjieski in https://github.com/usnistgov/macos_security/pull/798
• test: fix test suite by @sebastian-zentral in https://github.com/usnistgov/macos_security/pull/800
• Fix OS-version-specific enforcement_info handling and merging by @brodjieski in https://github.com/usnistgov/macos_security/pull/802
• fix: restore source block delimiters mangled by a bulk edit by @mgajdar in https://github.com/usnistgov/macos_security/pull/804
• Add pytest action to the CI by @sebastian-zentral in https://github.com/usnistgov/macos_security/pull/805
• fix: correct exemption discovery in fix by @brodjieski in https://github.com/usnistgov/macos_security/pull/807
• fix: CustomRegex Description is a dictionary in pwpolicy_custom_regex… by @Nick8844t in https://github.com/usnistgov/macos_security/pull/815
• Fix deep_merge behavior for preferred key by @brodjieski in https://github.com/usnistgov/macos_security/pull/811
• Remove os_show_filename_extensions_enable, untag lockout timeout from CIS by @tonyyo11 in https://github.com/usnistgov/macos_security/pull/822
• add[rule]: os_admin_group_membership_defined by @brodjieski in https://github.com/usnistgov/macos_security/pull/813
• Rule fixes for Issues - New Rules Added by @robertgendler in https://github.com/usnistgov/macos_security/pull/825
• Correct CIS Benchmark tagging for macOS 15, 26 and 27 by @tonyyo11 in https://github.com/usnistgov/macos_security/pull/830
• Fix os_asl_log_files_* checks and fixes: resolve relative destinations, skip non-files (#832) by @Nick8844t in https://github.com/usnistgov/macos_security/pull/839
• Fixed Checks by @robertgendler in https://github.com/usnistgov/macos_security/pull/835
• Improve custom reference rendering in HTML, PDF, and Markdown by @brodjieski in https://github.com/usnistgov/macos_security/pull/812
• fix: defer base64 encoding of result_value until after ODV substitution by @brodjieski in https://github.com/usnistgov/macos_security/pull/844
• Carry nlmapgov_base and nlmapgov_plus benchmarks to macOS 27.0 by @aronvandenherik in https://github.com/usnistgov/macos_security/pull/846
• fix: show full parser help for --help and subcommand --help by @bhaskargurram-ai in https://github.com/usnistgov/macos_security/pull/841
• test: cover deep_merge dropping override fields after the preferred key by @Nick8844t in https://github.com/usnistgov/macos_security/pull/824
• CIS: align macOS 15, 26 and 27 tagging with the new benchmark drafts by @tonyyo11 in https://github.com/usnistgov/macos_security/pull/847
• Added DISA STIG for iOS/iPadOS 27 to each rule by @hardstriker in https://github.com/usnistgov/macos_security/pull/849
• CIS: align iOS 26 tagging with v1.0.0 and add iOS 27 by @tonyyo11 in https://github.com/usnistgov/macos_security/pull/852
• Dev rule updates by @robertgendler in https://github.com/usnistgov/macos_security/pull/851
• Updated cspell project words to include new terms by @robertgendler in https://github.com/usnistgov/macos_security/pull/854
• mSCP 27.1 Release by @robertgendler in https://github.com/usnistgov/macos_security/pull/853

New Contributors

• @sebastian-zentral made their first contribution in https://github.com/usnistgov/macos_security/pull/800
• @Nick8844t made their first contribution in https://github.com/usnistgov/macos_security/pull/815
• @bhaskargurram-ai made their first contribution in https://github.com/usnistgov/macos_security/pull/841

Full Changelog: https://github.com/usnistgov/macos_security/compare/release_27.0...release_27.1