<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
(Note: cross-posted to two mailing lists)<br>
<br>
jOVAL.org has just published OVAL schemas for nine new MacOS test
types:<br>
<ul>
<li>authorizationdb_test - provides access to plist information
stored in the authorization database</li>
<li>corestorage_test - provides access to core storage information</li>
<li>gatekeeper_test - provides access to Gatekeeper information</li>
<li>keychain_test - provides access to keychain settings</li>
<li>launchd_test - enumerates launchd-initiated agents/daemons</li>
<li>rlimit_test - provides access to launchd resource limits</li>
<li>softwareupdate_test - provides access to softwareupdate
list/schedule</li>
<li>systemprofiler_test - provides access to plist-format data
from the system_profiler<br>
</li>
<li>systemsetup_test - provides access to system setup information</li>
</ul>
See:
<a class="moz-txt-link-freetext" href="https://github.com/joval/Sandbox/commit/827c2dec9a9c3db51860c288994f452381b33d52">https://github.com/joval/Sandbox/commit/827c2dec9a9c3db51860c288994f452381b33d52</a><br>
<br>
Note, I think the keychain_test is potentially problematic, because
desktop access is required in order to read another user's keychain
(so someone can enter the keychain's password in the dialog box that
pops up) -- meaning it can only be implemented by a host-based
user-driven assessment tool.<br>
<br>
Anyway, any feedback (from the Apple community in particular) would
be appreciated.<br>
<br>
Best regards,<br>
--David Solin<br>
<br>
<div class="moz-signature">-- <br>
<p style="color: #333; font: normal 11px/16px 'Droid Sans', Arial,
sans-serif;"> <span style="font-size:14px;line-height:18px;">jOVAL.org:
SCAP Simplified.</span><br>
<a style="color:#360;" href="http://www.joval.org">Learn More</a>
| <a style="color:#360;" href="http://www.joval.org/features/">Features</a>
| <a style="color:#360;" href="http://www.joval.org/download/">Download</a>
</p>
</div>
</body>
</html>