refactor[rules] External Storage

Modified os_network_storage_restriction and os_external_storage_access_defined
usnistgov · Sep 4, 2024 · d249abe · d249abe
1 parent 7ea6633
commit d249abe
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 7 deletions.
diff --git a/...s/os/os_external_storage_restriction.yaml → ...s/os_external_storage_access_defined.yaml b/...s/os/os_external_storage_restriction.yaml → ...s/os_external_storage_access_defined.yaml
@@ -1,7 +1,7 @@
-id: os_external_storage_restriction
-title: External Storage Must Be Restricted
+id: os_external_storage_access_defined
+title: Access to External Storage Must Be Defined
 discussion: |-
-  External Storage _MUST_ be restricted. 
+  Access to external storage _MUST_ be managed. 
   
   NOTE: Apple's built in method using declative device management method only allows you to set external storage manament to Allowed, ReadOnly, and Disallowed.
 check: |
@@ -16,17 +16,23 @@ references:
   cci:
     - N/A
   800-53r5:
-    - N/A
+    - MP-7
   srg:
     - N/A
   disa_stig:
     - N/A
   800-171r3:
-    - N/A
+    - 03.08.07
+  cmmc:
+    - MP.L2-3.8.7
+    - MP.L2-3.8.8    
 macOS:
   - '15.0'
 tags:
-  - none
+  - cmmc_lvl2
+  - 800-53r5_low
+  - 800-53r5_moderate
+  - 800-53r5_high  
 odv:
   hint: Allowed, ReadOnly, or Disallowed
   recommended: Allowed

diff --git a/rules/os/os_network_storage_restriction.yaml b/rules/os/os_network_storage_restriction.yaml
@@ -16,13 +16,15 @@ references:
   cci:
     - N/A
   800-53r5:
-    - N/A
+    - AC-20(4)
   srg:
     - N/A
   disa_stig:
     - N/A
   800-171r3:
     - N/A
+  cmmc:
+    - N/A
 macOS:
   - '15.0'
 tags:
-Original file line number
+Diff line change
@@ Expand Up / @@ -16,13 +16,15 @@ references: @@
       cci:
         - N/A
 -53r5:
-        - N/A
+        - AC-20(4)
       srg:
         - N/A
       disa_stig:
         - N/A
 -171r3:
         - N/A
+      cmmc:
+        - N/A
     macOS:
       - '15.0'
     tags:
@@ Expand Down @@