[OVAL DEVELOPER] FW: MacOS Gatekeeper test - Any design docs, anywhere?

David Solin solin at jovalcm.com
Thu Jan 31 14:22:29 EST 2019

Hi John,

This is one of the tests I added to make it possible to convert the CIS guidance on MacOSX into pure OVAL!  Sorry I didn’t document it very well… you can always submit a PR to update it. ;)

Anyway, the enabled item entity maps to the result of the command “spctl --status”.  You can find any unlabeled (unsigned) applications using “spctl --list | grep -i unlabeled”.

For more info, see:

Best regards,
—David Solin

> On Jan 31, 2019, at 12:07 PM, Ulmer, John R CIV USN SPAWARSYSCEN LANT SC (US) via OVAL_Developer <oval_developer at lists.cisecurity.org> wrote:
> Apologies, if this is redundant.  But, I think I usually get a copy of email sent to the list, myself.  And, I did not see one.  So, I’m sending this again.  Please see forwarded email below.
> Sent: Wednesday, January 30, 2019 9:41 AM
> To: oval_developer at lists.cisecurity.org <mailto:oval_developer at lists.cisecurity.org>
> Subject: MacOS Gatekeeper test - Any design docs, anywhere?
> Morning All,
> Does anyone know where I can find some design/intended-use docs for the MacOS Gatekeeper test?  The schema are a little vague.
> Thanks
> ----------------------------------------
> John R Ulmer
> SPAWAR System Center Atlantic
> John.r.ulmer6.civ at mail.mil <mailto:John.r.ulmer6.civ at mail.mil>
> 843 218-5953
> _______________________________________________
> OVAL_Developer mailing list
> OVAL_Developer at lists.cisecurity.org <mailto:OVAL_Developer at lists.cisecurity.org>
> http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org <http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.cisecurity.org/pipermail/oval_developer_lists.cisecurity.org/attachments/20190131/5254678e/attachment.html>

More information about the OVAL_Developer mailing list