Hello All, Anyone know where there is more information/details on the Mac OSX Gatekeeper test/object/state/items? The example on github has an item with results of status "not applicable." Thanks, John Ulmer SPAWAR Systems Center Atlantic John.Ulmer@navy.mil<mailto:John.Ulmer@navy.mil> 843.218.5953 ...

Hi John, I attached a sample result from my laptop. Is that helpful? Best regards, —David Solin David A. Solin Co-Founder, Research & Technology solin@jovalcm.com ... > On Apr 7, 2016, at 2:11 PM, Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 <john.ulmer@navy.mil> wrote: > > Hello All, > > > > Anyone know where there is more information/details on the Mac OSX Gatekeeper test/object/state/items? The example on github has an item with results of status "not applicable." > > > > Thanks, > > > > John Ulmer > > SPAWAR Systems Center Atlantic > > John.Ulmer@navy.mil<mailto:John.Ulmer@navy.mil> > > 843.218.5953 > > > ... > > _______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org

Hey David, Thanks. But, isn't there usually a write up about the general need for the test and its usage and fit into OVAL? 'Seems like I've read a few of those justifying additions to OVAL in the past. It is not necessarily required in this case, but, I like to start at the beginning, so to speak. Thanks again, John Ulmer SPAWAR Systems Center Atlantic (843)218-5953 john.ulmer@navy.mil<mailto:john.ulmer@navy.mil> ________________________________ From: David Solin [solin@jovalcm.com] Sent: Thursday, April 07, 2016 3:36 PM To: Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 Cc: oval_developer@lists.cisecurity.org Subject: [Non-DoD Source] Re: [OVAL DEVELOPER] (no subject) Hi John, I attached a sample result from my laptop. Is that helpful? Best regards, —David Solin David A. Solin Co-Founder, Research & Technology solin@jovalcm.com > On Apr 7, 2016, at 2:11 PM, Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 <john.ulmer@navy.mil> wrote: > > Hello All, > > > > Anyone know where there is more information/details on the Mac OSX Gatekeeper test/object/state/items? The example on github has an item with results of status "not applicable." > > > > Thanks, > > > > John Ulmer > > SPAWAR Systems Center Atlantic > > John.Ulmer@navy.mil<mailto:John.Ulmer@navy.mil> > > 843.218.5953 > > > ... > > _______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org ...

This was the original request for feedback (pre-dating that process, I believe): http://making-security-measurable.1364806.n2.nabble.com/New-OVAL-tests-for-MacOSX-td7584568.html I recall reviewing them live at an OVAL Developer Days conference in Virginia. The attached proposal was attached to the OVAL board vote approving the new tests. Best regards, —David A. Solin Co-Founder, Research & Technology solin@jovalcm.com ... > On Apr 7, 2016, at 2:40 PM, Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 <john.ulmer@navy.mil> wrote: > > Hey David, > > > > Thanks. But, isn't there usually a write up about the general need for the test and its usage and fit into OVAL? 'Seems like I've read a few of those justifying additions to OVAL in the past. It is not necessarily required in this case, but, I like to start at the beginning, so to speak. > > > > Thanks again, > > > > John Ulmer > > SPAWAR Systems Center Atlantic > (843)218-5953 > > john.ulmer@navy.mil<mailto:john.ulmer@navy.mil> > > ________________________________ > From: David Solin [solin@jovalcm.com] > Sent: Thursday, April 07, 2016 3:36 PM > To: Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 > Cc: oval_developer@lists.cisecurity.org > Subject: [Non-DoD Source] Re: [OVAL DEVELOPER] (no subject) > > Hi John, > > I attached a sample result from my laptop. Is that helpful? > > Best regards, > —David Solin > > David A. Solin > Co-Founder, Research & Technology > solin@jovalcm.com > > > > > >> On Apr 7, 2016, at 2:11 PM, Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 <john.ulmer@navy.mil> wrote: >> >> Hello All, >> >> >> >> Anyone know where there is more information/details on the Mac OSX Gatekeeper test/object/state/items? The example on github has an item with results of status "not applicable." >> >> >> >> Thanks, >> >> >> >> John Ulmer >> >> SPAWAR Systems Center Atlantic >> >> John.Ulmer@navy.mil<mailto:John.Ulmer@navy.mil> >> >> 843.218.5953 >> >> >> ... >> >> _______________________________________________ >> OVAL_Developer mailing list >> OVAL_Developer@lists.cisecurity.org >> http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org > > ... > > _______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org

Very Good. Thanks, John Ulmer SPAWAR Systems Center Atlantic (843)218-5953 john.ulmer@navy.mil<mailto:john.ulmer@navy.mil> ________________________________ From: David Solin [solin@jovalcm.com] Sent: Thursday, April 07, 2016 3:59 PM To: Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 Cc: oval_developer@lists.cisecurity.org Subject: Re: [OVAL DEVELOPER] [Non-DoD Source] Re: (no subject) This was the original request for feedback (pre-dating that process, I believe): http://making-security-measurable.1364806.n2.nabble.com/New-OVAL-tests-for-MacOSX-td7584568.html I recall reviewing them live at an OVAL Developer Days conference in Virginia. The attached proposal was attached to the OVAL board vote approving the new tests. Best regards, —David A. Solin Co-Founder, Research & Technology solin@jovalcm.com > On Apr 7, 2016, at 2:40 PM, Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 <john.ulmer@navy.mil> wrote: > > Hey David, > > > > Thanks. But, isn't there usually a write up about the general need for the test and its usage and fit into OVAL? 'Seems like I've read a few of those justifying additions to OVAL in the past. It is not necessarily required in this case, but, I like to start at the beginning, so to speak. > > > > Thanks again, > > > > John Ulmer > > SPAWAR Systems Center Atlantic > (843)218-5953 > > john.ulmer@navy.mil<mailto:john.ulmer@navy.mil> > > ________________________________ > From: David Solin [solin@jovalcm.com] > Sent: Thursday, April 07, 2016 3:36 PM > To: Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 > Cc: oval_developer@lists.cisecurity.org > Subject: [Non-DoD Source] Re: [OVAL DEVELOPER] (no subject) > > Hi John, > > I attached a sample result from my laptop. Is that helpful? > > Best regards, > —David Solin > > David A. Solin > Co-Founder, Research & Technology > solin@jovalcm.com > > > > > >> On Apr 7, 2016, at 2:11 PM, Ulmer, John R CIV SPAWARSYSCEN-ATLANTIC, 59220 <john.ulmer@navy.mil> wrote: >> >> Hello All, >> >> >> >> Anyone know where there is more information/details on the Mac OSX Gatekeeper test/object/state/items? The example on github has an item with results of status "not applicable." >> >> >> >> Thanks, >> >> >> >> John Ulmer >> >> SPAWAR Systems Center Atlantic >> >> John.Ulmer@navy.mil<mailto:John.Ulmer@navy.mil> >> >> 843.218.5953 >> >> >> ... >> >> _______________________________________________ >> OVAL_Developer mailing list >> OVAL_Developer@lists.cisecurity.org >> http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org > > ... > > _______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org ...