Skip to content

Commit

Permalink
Fix directory permissions on Catalina
Browse files Browse the repository at this point in the history
This resolves jamf#9, but there should be more thorough research on what
directories in /System should not be modified by the remediation script.
  • Loading branch information
pcmxgti committed Mar 18, 2020
1 parent a4a7760 commit 25a59ec
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion CIS Scripts/3_Security_Remediation.sh
Original file line number Diff line number Diff line change
Expand Up @@ -559,7 +559,7 @@ Audit5_1_3="$(defaults read "$plistlocation" OrgScore5_1_3)"
# If client fails, then remediate
if [ "$Audit5_1_3" = "1" ]; then
IFS=$'\n'
for sysPermissions in $( find /System -type d -perm -2 | grep -v "Public/Drop Box" ); do
for sysPermissions in $( find /System -type d -perm -2 \! \( -path '*/private/tmp' -o -path '*/Public/Drop Box' \) ); do
chmod -R o-w "$sysPermissions"
done
echo "$(date -u)" "5.1.3 enforced" | tee -a "$logFile"
Expand Down

0 comments on commit 25a59ec

Please sign in to comment.