Merge pull request #704 from brodjieski/dev_2.0

Sync and merge VisionOS STIG rules

Author: robertgendler

scripts/2.0-merge.py

@@ -388,6 +388,16 @@ def main():
                 new_yaml["platforms"] = {"visionOS": {}}
 
                 new_yaml["platforms"]["visionOS"].update({os_: {}})
+                if "visionos_stig" in rule_yaml["tags"]:
+                    if "benchmarks" in new_yaml["platforms"]["visionOS"][os_]:
+                        new_yaml["platforms"]["visionOS"][os_]["benchmarks"].append(
+                            "visionos_stig"
+                        )
+                    else:
+                        new_yaml["platforms"]["visionOS"][os_].update(
+                            {"benchmarks": ["visionos_stig"]}
+                        )
+                    new_yaml["tags"].remove("visionos_stig")
                 if "severity" in rule_yaml:
                     new_yaml["platforms"]["visionOS"][os_].update(
                         {"severity": rule_yaml["severity"]}
@@ -459,6 +469,7 @@ def main():
                             {"benchmarks": ["ios_stig"]}
                         )
                     new_yaml["tags"].remove("ios_stig")
+
                 if "ios_stig_byoad" in rule_yaml["tags"]:
                     if "benchmarks" in new_yaml["platforms"]["iOS"][os_]:
                         new_yaml["platforms"]["iOS"][os_]["benchmarks"].append(
@@ -890,7 +901,30 @@ def main():
                                         ].update(
                                             {"supervised": rule_yaml["supervised"]}
                                         )
-                                    # print(update_rule_yaml)
+                                    if "severity" in rule_yaml:
+                                        update_rule_yaml["platforms"]["visionOS"][
+                                            os_
+                                        ].update({"severity": rule_yaml["severity"]})
+
+                                    if "visionos_stig" in rule_yaml["tags"]:
+                                        if (
+                                            "benchmarks"
+                                            in update_rule_yaml["platforms"][
+                                                "visionOS"
+                                            ][os_]
+                                        ):
+                                            update_rule_yaml["platforms"]["visionOS"][
+                                                os_
+                                            ]["benchmarks"].append("visionos_stig")
+                                        else:
+                                            update_rule_yaml["platforms"]["visionOS"][
+                                                os_
+                                            ].update({"benchmarks": ["visionos_stig"]})
+
+                                        if "visionos_stig" in update_rule_yaml["tags"]:
+                                            update_rule_yaml["tags"].remove(
+                                                "visionos_stig"
+                                            )
                                 else:
                                     if "iOS" not in update_rule_yaml["platforms"]:
                                         update_rule_yaml["platforms"].update(
@@ -998,6 +1032,7 @@ def main():
 
                                         if "ios_stig" in update_rule_yaml["tags"]:
                                             update_rule_yaml["tags"].remove("ios_stig")
+
                                     if "ios_stig_byoad" in rule_yaml["tags"]:
                                         if (
                                             "benchmarks"
@@ -1371,6 +1406,7 @@ def main():
                                         {"benchmarks": ["ios_stig"]}
                                     )
                                 new_yaml["tags"].remove("ios_stig")
+
                             if "ios_stig_byoad" in rule_yaml["tags"]:
                                 if "benchmarks" in new_yaml["platforms"]["iOS"][os_]:
                                     new_yaml["platforms"]["iOS"][os_][
@@ -1432,6 +1468,19 @@ def main():
                                 new_yaml["platforms"]["visionOS"][os_].update(
                                     {"supervised": rule_yaml["supervised"]}
                                 )
+                            if "visionos_stig" in rule_yaml["tags"]:
+                                if (
+                                    "benchmarks"
+                                    in new_yaml["platforms"]["visionOS"][os_]
+                                ):
+                                    new_yaml["platforms"]["visionOS"][os_][
+                                        "benchmarks"
+                                    ].append("visionos_stig")
+                                else:
+                                    new_yaml["platforms"]["visionOS"][os_].update(
+                                        {"benchmarks": ["visionos_stig"]}
+                                    )
+                                new_yaml["tags"].remove("visionos_stig")
 
                         if "800-53r5" in rule_yaml["references"]:
                             new_yaml["references"]["nist"].update(

src/mscp/data/rules/icloud/icloud_backup_disabled.yaml

@@ -100,6 +100,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/icloud/icloud_drive_disable.yaml

@@ -145,6 +145,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: true
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/icloud/icloud_keychain_disable.yaml

@@ -150,6 +150,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/icloud/icloud_managed_apps_store_data_disabled.yaml

@@ -112,6 +112,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/icloud/icloud_photos_disable.yaml

@@ -129,6 +129,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/os/os_airdrop_disable.yaml

@@ -148,6 +148,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: true
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/os/os_airdrop_unmanaged_destination_enable.yaml

@@ -122,6 +122,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: medium
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/os/os_allow_contacts_read_managed_sources_unmanaged_destinations_disable.yaml

@@ -89,6 +89,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: low
     introduced: '2.0'
 tags:
   - 800-53r5_low

src/mscp/data/rules/os/os_allow_contacts_write_managed_sources_unmanaged_destinations_disable.yaml

@@ -92,6 +92,9 @@ platforms:
   visionOS:
     '26.0':
       supervised: false
+      benchmarks:
+        - name: visionos_stig
+          severity: low
     introduced: '2.0'
 tags:
   - 800-53r5_low