Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Apple Software Update Analysis 10.8
ID : 2994639
Author : rustymyers
Domain : BESC
Imported : 2014-02-14T12:35:58
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Apple Software Update Analysis 10.8</Title>
<Description>Check status of Apple Software Update on OS X 10.8.x. Return &quot;Software Update Enabled&quot; if Apple Software Updates is Enabled. Return &quot;Software Update Disabled&quot; if Software Updates is Disabled. </Description>
<Relevance>mac of operating system</Relevance>
<Relevance><![CDATA[system version >= "10.8" AND system version < "10.9"]]></Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Fri, 14 Feb 2014 19:27:04 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="16" Name="SoftwareUpdatePeriodicCheck(True=Off)" EvaluationPeriod="PT12H">if (not exists dictionary &quot;com.apple.softwareupdatecheck.periodic&quot; of dictionaries of file &quot;/var/db/launchd.db/com.apple.launchd/overrides.plist&quot;) then &quot;Software Update Enabled&quot; else if (boolean of value of entry whose (key of it is &quot;Disabled&quot;) of dictionary &quot;com.apple.softwareupdatecheck.periodic&quot; of dictionaries of file &quot;/var/db/launchd.db/com.apple.launchd/overrides.plist&quot;) then &quot;Software Update Disabled&quot; else &quot;Software Update Enabled&quot;</Property>
<Property ID="17" Name="SoftwareUpdateInitialcCheck(True=Off)" EvaluationPeriod="PT12H">if (not exists dictionary &quot;com.apple.softwareupdatecheck.initial&quot; of dictionaries of file &quot;/var/db/launchd.db/com.apple.launchd/overrides.plist&quot;) then &quot;Software Update Enabled&quot; else if (boolean of value of entry whose (key of it is &quot;Disabled&quot;) of dictionary &quot;com.apple.softwareupdatecheck.initial&quot; of dictionaries of file &quot;/var/db/launchd.db/com.apple.launchd/overrides.plist&quot;) then &quot;Software Update Disabled&quot; else &quot;Software Update Enabled&quot;</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Apple Software Update Analysis 10.9
ID : 2994640
Author : rustymyers
Domain : BESC
Imported : 2014-02-14T12:38:33
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Apple Software Update Analysis 10.9</Title>
<Description>Check status of Apple Software Update on OS X 10.9.x. Return &quot;Software Update Enabled&quot; if Apple Software Updates is Enabled. Return &quot;Software Update Disabled&quot; if Software Updates is Disabled. </Description>
<Relevance>mac of operating system</Relevance>
<Relevance><![CDATA[system version >= "10.9"]]></Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Fri, 14 Feb 2014 19:26:12 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="16" Name="SoftwareUpdatePeriodicCheck(True=Off)" EvaluationPeriod="PT12H">if (not exists boolean &quot;AutomaticCheckEnabled&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.SoftwareUpdate.plist&quot;) then &quot;Software Update Enabled&quot; else if (boolean &quot;AutomaticCheckEnabled&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.SoftwareUpdate.plist&quot;) then &quot;Software Update Enabled&quot; else &quot;Software Update Disabled&quot;</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Apple Time Machine
ID : 44
Author : jgstew
Domain : BESC
Imported : 2012-11-29T10:17:38
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Apple Time Machine</Title>
<Description><![CDATA[&lt;enter a description of the analysis here&gt; ]]></Description>
<Relevance>(name of operating system = &quot;Mac OS X&quot;) AND (if exists property &quot;in proxy agent context&quot; then (not in proxy agent context) else true) AND (if exists property &quot;android&quot; of type &quot;operating system&quot; then (not android of operating system) else true)</Relevance>
<Relevance><![CDATA[version of operating system >= "10.5"]]></Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Mon, 26 Nov 2012 21:36:13 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="6" Name="TM Last Backup" EvaluationPeriod="P1D">if(not exists file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No .TM.R file&quot; else if(not exists dictionary of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No dictionary&quot; else if((not exists entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No backup date entry&quot; else (((dates of values of entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) as string)</Property>
<Property ID="7" Name="TM time since LB" EvaluationPeriod="P1D">if(not exists file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No .TM.R file&quot; else if(not exists dictionary of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No dictionary&quot; else if((not exists entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No backup date entry&quot; else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) as string)</Property>
<Property ID="9" Name="TM mod time of log" EvaluationPeriod="P1D">if(not exists file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No .TM.R file&quot; else (modification time of file &quot;/private/var/db/.TimeMachine.Results.plist&quot; as string)</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Apple Time Machine
ID : 45
Author : jgstew
Domain : BESC
Imported : 2012-11-29T10:18:25
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Apple Time Machine</Title>
<Description><![CDATA[&lt;enter a description of the analysis here&gt; ]]></Description>
<Relevance>(name of operating system = &quot;Mac OS X&quot;) AND (if exists property &quot;in proxy agent context&quot; then (not in proxy agent context) else true) AND (if exists property &quot;android&quot; of type &quot;operating system&quot; then (not android of operating system) else true)</Relevance>
<Relevance><![CDATA[version of operating system >= "10.5"]]></Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Mon, 26 Nov 2012 21:36:13 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="6" Name="TM Last Backup" EvaluationPeriod="P1D">if(not exists file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No .TM.R file&quot; else if(not exists dictionary of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No dictionary&quot; else if((not exists entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No backup date entry&quot; else (((dates of values of entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) as string)</Property>
<Property ID="7" Name="TM time since LB" EvaluationPeriod="P1D">if(not exists file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No .TM.R file&quot; else if(not exists dictionary of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No dictionary&quot; else if((not exists entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No backup date entry&quot; else ((now - (maximum of dates of values of entries whose(exists keys of it AND exists values of it AND &quot;BACKUP_COMPLETED_DATE&quot; = key of it) of dictionary of it) of file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) as string)</Property>
<Property ID="9" Name="TM mod time of log" EvaluationPeriod="P1D">if(not exists file &quot;/private/var/db/.TimeMachine.Results.plist&quot;) then &quot;No .TM.R file&quot; else (modification time of file &quot;/private/var/db/.TimeMachine.Results.plist&quot; as string)</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Apple Update - Mac
ID : 2998548
Author : strawgate
Domain : BES
Imported : 2017-04-22T05:01:45
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Apple Update - Mac</Title>
<Description><![CDATA[<P>Provides information about Apple Software Update on Mac OS.</P>
<P>The missing updates relies on the last time Apple Update performed a check -- the data is as old as the last check.</P>
<P>For general information or to report issues with C3 Inventory content please visit GitHub here: <A href="https://github.com/strawgate/C3-Inventory">https://github.com/strawgate/C3-Inventory</A></P>]]></Description>
<Relevance>mac of operating system</Relevance>
<Domain>BES </Domain>
<Property ID="1" Name="Apple Update - Last Successful Update - Mac" EvaluationPeriod="P1D">date &quot;LastSuccessfulDate&quot; of dictionary of file &quot;com.apple.SoftwareUpdate.plist&quot; of folder &quot;/Library/Preferences&quot;</Property>
<Property ID="2" Name="Apple Update - Missing Updates - Mac" EvaluationPeriod="P1D">(string &quot;Display Name&quot; of it &amp; &quot; &quot; &amp; string &quot;Display Version&quot; of it) of dictionaries of values of array &quot;RecommendedUpdates&quot; of dictionaries of files &quot;/Library/Preferences/com.apple.SoftwareUpdate.plist&quot;</Property>
<Property ID="3" Name="Apple Update - Catalog Server - Mac" EvaluationPeriod="PT1H">string &quot;AppleCatalogURL&quot; of dictionaries of files &quot;/Library/Preferences/com.apple.SoftwareUpdate.plist&quot; | &quot;Apple Production&quot;</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : AppleEFINVRAM
ID : 2994552
Author : hansen_m
Domain : BESC
Imported : 2013-07-26T13:17:45
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>AppleEFINVRAM</Title>
<Description>Analyze NVRAM Variables with iokit

https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/ioreg.8.html

https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/nvram.8.html
</Description>
<Relevance>mac of operating system</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Fri, 26 Jul 2013 20:12:57 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="1" Name="NVRAM All Keys">concatenation &quot;; &quot; of (keys of entries of dictionary of node &quot;AppleEFINVRAM&quot; of node &quot;AppleEFIRuntime&quot; of node &quot;AppleACPIPlatformExpert&quot; of service plane of iokit registry as string)</Property>
<Property ID="2" Name="NVRAM Boot-Args">if (exists key whose ( it = &quot;boot-args&quot;) of entries of dictionary of node &quot;AppleEFINVRAM&quot; of node &quot;AppleEFIRuntime&quot; of node &quot;AppleACPIPlatformExpert&quot; of service plane of iokit registry) then string of value of it whose ( key of it = &quot;boot-args&quot;) of entries of dictionary of node &quot;AppleEFINVRAM&quot; of node &quot;AppleEFIRuntime&quot; of node &quot;AppleACPIPlatformExpert&quot; of service plane of iokit registry else &quot;&lt;No boot-args&gt;&quot;</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Application Firewall (AFL) Audit - Mac OS X
ID : 2994738
Author : rustymyers
Domain : BESC
Imported : 2014-10-13T10:49:54
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Application Firewall (AFL) Audit - Mac OS X</Title>
<Description><![CDATA[<P>Audit for OS X's Application Firewall (ALF).</P>
<P>References:<BR><A href="http://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/">http://krypted.com/mac-os-x/command-line-alf-on-mac-os-x/</A></P>]]></Description>
<Relevance><![CDATA[version of operating system >= "10.6"]]></Relevance>
<Relevance>mac of operating system</Relevance>
<Relevance>exists file &quot;/Library/Preferences/com.apple.alf.plist&quot;</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Mon, 13 Oct 2014 17:44:25 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="1" Name="ALF Version" EvaluationPeriod="P1D">string &quot;version&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot;</Property>
<Property ID="2" Name="ALF Global State" EvaluationPeriod="P1D">if (integer &quot;globalstate&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 1) then &quot;Enabled&quot; else ERROR &quot;Disabled&quot;</Property>
<Property ID="3" Name="ALF Allow Signed Apps" EvaluationPeriod="P1D">if (integer &quot;allowsignedenabled&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 1) then &quot;Enabled&quot; else ERROR &quot;Disabled&quot;</Property>
<Property ID="4" Name="ALF Logging Enabled " EvaluationPeriod="P1D">if (integer &quot;loggingenabled&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 1) then &quot;Enabled&quot; else ERROR &quot;Disabled&quot;</Property>
<Property ID="5" Name="ALF Logging Option " EvaluationPeriod="P1D">if version of operating system &gt;= &quot;10.9&quot; then (if (integer &quot;loggingoption&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 0) then &quot;throttled&quot; else if (integer &quot;loggingoption&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 1) then &quot;brief&quot; else if (integer &quot;loggingoption&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 2) then &quot;detailed&quot; else ERROR &quot;unknown value&quot;) else ERROR &quot;OS not Supported&quot;</Property>
<Property ID="6" Name="ALF Stealth Mode" EvaluationPeriod="P1D">if (integer &quot;stealthenabled&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot; = 1) then &quot;Enabled&quot; else ERROR &quot;Disabled&quot;</Property>
<Property ID="7" Name="ALF BundleID of Trusted Apps (Incoming Connections)" EvaluationPeriod="P1D">if (number of strings &quot;bundleid&quot; of dictionaries of values of array &quot;applications&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; &gt; 0) then concatenation &quot;; &quot; of strings &quot;bundleid&quot; of dictionaries of values of array &quot;applications&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; else ERROR &quot;none&quot;</Property>
<Property ID="8" Name="ALF Firewall Exceptions Path to binary (Do Not Appear in PreferencePane) " EvaluationPeriod="P1D">if (number of strings &quot;path&quot; of dictionaries of values of array &quot;exceptions&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; &gt; 0) then concatenation &quot;; &quot; of strings &quot;path&quot; of dictionaries of values of array &quot;exceptions&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; else ERROR &quot;none&quot;</Property>
<Property ID="9" Name="ALF BundleID of Binaries Required to Request Incoming Access" EvaluationPeriod="P1D">if (number of strings &quot;id&quot; of dictionaries of values of array &quot;explicitauths&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; &gt; 0) then concatenation &quot;; &quot; of strings &quot;id&quot; of dictionaries of values of array &quot;explicitauths&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; else ERROR &quot;none&quot;</Property>
<Property ID="10" Name="ALF Firewall Exceptions Process Name and State (Appear in PreferencePane when Enabled)" EvaluationPeriod="P1D">(strings &quot;proc&quot; of it, &quot;State: &quot; &amp; integer &quot;state&quot; of it as string) of dictionaries of values of entries of dictionary &quot;firewall&quot; of dictionary of file &quot;/Library/Preferences/com.apple.alf.plist&quot;</Property>
<Property ID="11" Name="ALF BundleID &amp; State of Trusted Apps" EvaluationPeriod="P1D">if (number of strings &quot;bundleid&quot; of dictionaries of values of array &quot;applications&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; &gt; 0) then (strings &quot;bundleid&quot; of it, &quot;State: &quot; &amp; (if (integer &quot;state&quot; of it = 2) then &quot;Blocked&quot; else if (integer &quot;state&quot; of it = 0) then &quot;Allowed&quot; else &quot;unkown&quot;) ) of dictionaries of values of array &quot;applications&quot; of dictionaries of file &quot;/Library/Preferences/com.apple.alf.plist&quot; else ERROR &quot;none&quot;</Property>
</Analysis>
</BES>
Loading