v0.1.2-beta
Main App Changes
-
Removed: The following Edge rules are not supported on macOS and have been removed from the CIS and STIG baselines:
- edge_3p_serp_telemetry_enabled
- edge_allow_import_of_data_from_other_browsers_on_each_microsoft_edge_launch
- edge_allow_unconfigured_sites_to_be_reloaded_in_internet_explorer_mode
- edge_allow_users_to_open_files_using_the_clickonce_protocol
- edge_allow_users_to_open_files_using_the_directinvoke_protocol
- edge_auto_update_check_period_override
- edge_automatically_open_downloaded_mht_or_mhtml_files_from_the_web_in_internet_explorer_mode
- edge_background_processing_must_be_disabled
- edge_choose_whether_users_can_receive_customized_background_images_and_text_suggestions_notifications_and_tips_for_microsoft_services
- edge_clear_history_for_ie_and_ie_mode_every_time_you_exit
- edge_continue_running_background_apps_after_microsoft_edge_closes
- edge_delete_old_browser_data_on_migration
- edge_dynamic_code_settings
- edge_enable_application_bound_encryption
- edge_enable_browser_legacy_extension_point_blocking
- edge_enable_gamer_mode
- edge_enable_startup_boost
- edge_enable_the_search_bar
- edge_enhanced_security_mode_configuration_for_intranet_zone_sites
- edge_force_microsoft_defender_smartscreen_checks_on_downloads_from_trusted_sources
- edge_live_captions_allowed
- edge_show_the_reload_in_internet_explorer_mode_button_in_the_toolbar
- edge_specify_if_online_ocsp_crl_checks_are_required_for_local_trust_anchors
- edge_standalone_sidebar_enabled
- edge_update_policy_override_default
- edge_wait_for_internet_explorer_mode_tabs_to_completely_unload_before_ending_the_browser_session
-
Fixed: Two Firefox location rules that were silently no-ops on macOS now behave correctly:
- firefox_block_new_requests_asking_to_access_location
- firefox_do_not_allow_preferences_to_be_changed
-
Changed: Application baselines (Chrome/Edge/Firefox) now live under
MSCP_Project_Files/config/default/baselines/application/alongside their application rules, keeping pristine defaults and user edits cleanly separated. MACE reads
user edits fromconfig/custom/baselines/first and falls back to the default location. -
Fixed: Main menu seasonal logos no longer shadow each other. Earth Day, Pride, Christmas, and Thanksgiving now display on their intended days instead of being overridden by neighboring holiday logos.
Compliance Editor Changes
- Fixed: Opening an Application baseline no longer falsely flags non-listed rules as "Disabled." This prevents phantom disabled rules when bundled baselines and rule files drift out of sync due to renames.
Build Hub Changes
- Fixed: Boolean values in generated Configuration Profiles now correctly render as
<true/>/<false/>instead of<integer>1</integer>/<integer>0</integer>, producing valid.mobileconfigoutput for rules with boolean ODV
values (e.g., Firefox extension updates, Chrome OCSP checks).
Audit Builder Hub Changes
No changes this release.
Documentation Builder Hub Changes
No changes this release.
Rule Builder Hub Changes
No changes this release.
Feedback Needed
Feedback Needed
Application rules are in alpha. These rules were derived from official CIS and DISA STIG sources but have not been thoroughly tested. We are working with official and community macAdmin sources to find a permanent home for these rules.
Your feedback on application rule accuracy and usability is especially appreciated.
We'd love your help testing features to make sure everything works as expected.
If you run into any issues or have suggestions, please open an issue at github.com/mace-app/mace.
Known Issues
-
mSCP Engines: I expect issues with the mSCP engines since they rely on the mSCP 2.0 Python scripts, which don't have everything fully mapped out yet.
-
mSCP Engines: Custom rules are not currently supported.
-
UI font sizing: May vary depending on your system's accessibility, display, or font settings. A fix requires reworking fonts across every screen, so this is on hold for now.
-
(Sequoia & Below): Glass/blur effects don't look quite right on older macOS versions. Adjusting visuals to work well without these effects will take time.
-
Console logging: May not capture all events. Logging is being improved incrementally as features are updated.