mSCP 2.0, Release 27.1

[robertgendler]

What's Changed

• Fixes base64 test for system_settings_loginwindow_loginwindowtext_enable
• Fixes checks for OpenSSH 10.5p1 which is included in macOS 27.2.
• Added rules (os_admin_group_membership_defined, os_mcx_disable, os_ssh_pqc_configure, os_sshd_pqc_configure, os_messages_summary_disable)
• Updated fix/check in multiple rules
• Improved custom reference rendering in HTML, PDF and Markdown
• Added Dutch BIO information for macOS 27
• Updated finalized CIS Benchmark for macOS 27 and iOS 27
• Added iOS 27 DISA STIG

Pull Requests

• rules: fix malformed macOS 26.0 check for system_settings_critical_update_install_enforce by @mgajdar in rules: fix malformed macOS 26.0 check for system_settings_critical_update_install_enforce #799
• Add ADOC table parsing and additional authors to HTML template by @brodjieski in Add ADOC table parsing and additional authors to HTML template #798
• test: fix test suite by @sebastian-zentral in test: fix test suite #800
• Fix OS-version-specific enforcement_info handling and merging by @brodjieski in Fix OS-version-specific enforcement_info handling and merging #802
• fix: restore source block delimiters mangled by a bulk edit by @mgajdar in fix: restore source block delimiters mangled by a bulk edit #804
• Add pytest action to the CI by @sebastian-zentral in Add pytest action to the CI #805
• fix: correct exemption discovery in fix by @brodjieski in fix: correct exemption discovery in fix #807
• fix: CustomRegex Description is a dictionary in pwpolicy_custom_regex… by @Nick8844t in fix: CustomRegex Description is a dictionary in pwpolicy_custom_regex… #815
• Fix deep_merge behavior for preferred key by @brodjieski in Fix deep_merge behavior for preferred key #811
• Remove os_show_filename_extensions_enable, untag lockout timeout from CIS by @tonyyo11 in Remove os_show_filename_extensions_enable, untag lockout timeout from CIS #822
• add[rule]: os_admin_group_membership_defined by @brodjieski in add[rule]: os_admin_group_membership_defined #813
• Rule fixes for Issues - New Rules Added by @robertgendler in Rule fixes for Issues - New Rules Added #825
• Correct CIS Benchmark tagging for macOS 15, 26 and 27 by @tonyyo11 in Correct CIS Benchmark tagging for macOS 15, 26 and 27 #830
• Fix os_asl_log_files_* checks and fixes: resolve relative destinations, skip non-files ([Rule]: audit_* checks evaluate the working directory when audit_control is absent (default since macOS 14): false passes #832) by @Nick8844t in Fix os_asl_log_files_* checks and fixes: resolve relative destinations, skip non-files (#832) #839
• Fixed Checks by @robertgendler in Fixed Checks #835
• Improve custom reference rendering in HTML, PDF, and Markdown by @brodjieski in Improve custom reference rendering in HTML, PDF, and Markdown #812
• fix: defer base64 encoding of result_value until after ODV substitution by @brodjieski in fix: defer base64 encoding of result_value until after ODV substitution #844
• Carry nlmapgov_base and nlmapgov_plus benchmarks to macOS 27.0 by @aronvandenherik in Carry nlmapgov_base and nlmapgov_plus benchmarks to macOS 27.0 #846
• fix: show full parser help for --help and subcommand --help by @bhaskargurram-ai in fix: show full parser help for --help and subcommand --help #841
• test: cover deep_merge dropping override fields after the preferred key by @Nick8844t in test: cover deep_merge dropping override fields after the preferred key #824
• CIS: align macOS 15, 26 and 27 tagging with the new benchmark drafts by @tonyyo11 in CIS: align macOS 15, 26 and 27 tagging with the new benchmark drafts #847
• Added DISA STIG for iOS/iPadOS 27 to each rule by @hardstriker in Added DISA STIG for iOS/iPadOS 27 to each rule #849
• CIS: align iOS 26 tagging with v1.0.0 and add iOS 27 by @tonyyo11 in CIS: align iOS 26 tagging with v1.0.0 and add iOS 27 #852
• Dev rule updates by @robertgendler in Dev rule updates #851
• Updated cspell project words to include new terms by @robertgendler in Updated cspell project words to include new terms #854
• mSCP 27.1 Release by @robertgendler in mSCP 27.1 Release #853

New Contributors

• @sebastian-zentral made their first contribution in test: fix test suite #800
• @Nick8844t made their first contribution in fix: CustomRegex Description is a dictionary in pwpolicy_custom_regex… #815
• @bhaskargurram-ai made their first contribution in fix: show full parser help for --help and subcommand --help #841

Full Changelog: release_27.0...release_27.1

---

This discussion was created from the release mSCP 2.0, Release 27.1.