3.2.1

Since v3.0.0 is the last major release of mOSL (See: The Future of mOSL) all subsequent v3.x.x releases will be focused on stability, bug fixes, documentation and making mOSL easier to maintain and debug

Bug Fixes

• fix: Removed reference to no_fix_commands variable which would cause fix mode to error with unbound variable when calling check_if_standard_user (c0e30d1)

3.2.0

Since v3.0.0 is the last major release of mOSL (See: The Future of mOSL) all subsequent v3.x.x releases will be focused on stability, bug fixes, documentation and making mOSL easier to maintain and debug

Improvements

• Update test: Use full binary paths and general cleanup
  • (3b47f02) (89128b0) (1ef67b2) (5596ed2) (a909ad9)
• Lockdown: Change tput to /usr/bin/tput (74c7c00)
• disable_ipv6: fix_command : Invoke networksetup with sudo
  • This is due to @theevilbit discovery of CVE-2020-9824.
  • See: https://twitter.com/theevilbit/status/1265523434257293314

Bug Fixes

• full_disk_access_check: Remove erroneous slash in Mail path (7b260bc)

Miscellaneous

• Moved CI from Travis CI to GitHub Actions

Documentation

• Updated Security.md supported version to 3.2.0

3.1.0

Since v3.0.0 is the last major release of mOSL (See: The Future of mOSL) all subsequent v3.x.x releases will be focused on stability, bug fixes, documentation and making mOSL easier to maintain and debug

Improvements

• disable_ipv6: more efficient audit_command (8e15c37)
• Call system binaries using their full path e.g. grep is replaced by /bin/grep(c79ebc2)(968c88b)(9393241)
• debug
  • Added check_if_vm (1a20aa8) (1a20aa8)
    • TODO: Detect more VM types. See #26 (06853a8)
  • Added is_codsigned global (355bb9e)
  • Added check_sip (e9cd909)
• Add version option which prints Lockdown version string (3c7a62d) (953b137) (6bcbdf0)
  • ./Lockdown version
• usage: Update (6bcbdf0)
• debug: Add T2 field (5f107b5)

Bug Fixes

• debug : Redirect output of verify_signature to /dev/null (2ae0106) #27

Miscellaneous

• Remove statistics function and all printing of audit/ fix statistics (f2d00ac)
  • Found another couple of bugs in how the stats were calculated. I don’t have the energy or inclination to fix them. Choosing to remove the functionality instead.

Documentation

• Disable IPv6: Add explanation (66b2633)
• Commands.md: Add some documentation (b1b25d8)

3.1.0 Beta Two

Since v3.0.0 is the last major release of mOSL (See: The Future of mOSL) all subsequent v3.x.x releases will be focused on stability, bug fixes, documentation and making mOSL easier to maintain and debug

Improvements

• Add version option which prints Lockdown version string (3c7a62d) (953b137) (6bcbdf0)
  • ./Lockdown version
• usage: Update (6bcbdf0)
• debug: Add T2 field (5f107b5)

Bug Fixes

• debug : Redirect output of verify_signature to /dev/null (2ae0106) #27

Miscellaneous

• Remove statistics function and all printing of audit/ fix statistics (f2d00ac)
  • Found another couple of bugs in how the stats were calculated. I don’t have the energy or inclination to fix them. Choosing to remove the functionality instead.

3.1.0 Beta One

Since v3.0.0 is the last major release of mOSL (See: The Future of mOSL) all subsequent v3.x.x releases will be focused on stability, bug fixes, documentation and making mOSL easier to maintain and debug

Improvements

• disable_ipv6: more efficient audit_command (8e15c37)
• Call system binaries using their full path e.g. grep is replaced by /bin/grep(c79ebc2)(968c88b)(9393241)
• debug
  • Added check_if_vm (1a20aa8) (1a20aa8)
    • TODO: Detect more VM types. See #26 (06853a8)
  • Added is_codsigned global (355bb9e)
  • Added check_sip (e9cd909)

Documentation

• Disable IPv6: Add explanation (66b2633)
• Commands.md: Add some documentation (b1b25d8)

3.0.0 Catalina

Add support for macOS Catalina (10.15).

No new features, only minor changes to support Mojave

This will be the last major release written in Bash, see "The Future of mOSL".

• Change Mojave to Catalina (b69b77a)
• Bump LOCKDOWN_VERSION to v3.0.0 (f588f55)
• macos_compatability_check: Increment minor version (45f2ba0)
• Rename path to lockdown_path (2021919)
• verify_signature: Remove variable declaration (507f224)
• Full Disk Access: Add and later clarification (e0b9238)

From Beta Two:

• Actually sign Lockdown (9cf9ade)

From Beta One:

• Change Mojave to Catalina (b69b77a)
• Bump LOCKDOWN_VERSION to v3.0.0 (f588f55)
• macos_compatability_check: Increment minor version (45f2ba0)
• Rename path to lockdown_path (2021919)
• verify_signature: Remove variable declaration (507f224)
• Full Disk Access: Add and later clarification (e0b9238)

3.0.0 Catalina Beta Two

Adds support for macOS Catalina (10.15).

No new features. Only minor changes to support Mojave

• Actually sign Lockdown (9cf9ade)

From Beta One:

• Change Mojave to Catalina (b69b77a)
• Bump LOCKDOWN_VERSION to v3.0.0 (f588f55)
• macos_compatability_check: Increment minor version (45f2ba0)
• Rename path to lockdown_path (2021919)
• verify_signature: Remove variable declaration (507f224)
• Full Disk Access: Add and later clarification (e0b9238)

3.0.0 Catalina Beta One

Adds support for macOS Catalina (10.15).

No new features. Only minor changes to support Mojave

• Change Mojave to Catalina (b69b77a)
• Bump LOCKDOWN_VERSION to v3.0.0 (f588f55)
• macos_compatability_check: Increment minor version (45f2ba0)
• Rename path to lockdown_path (2021919)
• verify_signature: Remove variable declaration (507f224)
• Full Disk Access: Add and later clarification (e0b9238)

2.4.0

Improvements

• Added support for verifying signature if installed by brew (dc6b64f)
  • Declare LOCKDOWN_VERSION at top of file instead of in main (a8612f6)

2.3.0

Improvements

• Replace enable_automatic_updates with enable_automatic_system_updates & enable_automatic_app_store_updates (f6f2594) (e7a1b83)
  • Add entries for both to Commands.MD (eaf21d5)
  • See #17
• Change Mojave Permissions section of README.md to Full Disk Access Permission (6e05f34)
  • Updated with better description
  • Updated to reflect disable_auto_open_safe_downloads requiring the permission
  • See #18
• Moved statistics calculations into a function statistics (c91fb55)
  • Add full disk permission statistics (6e63d30) (41d9541)
  • This is an improvement and a bug fix. The stats should now be correct (only user visible change) and main is now less cluttered by moving all this into its own function.

Bug Fixes

• Only attempt to audit/fix disable_auto_open_safe_downloads if Terminal.app has the Full Disk Access permission (dd4cc33)
  • See #18
• Remove erroneous variable passed to full_disk_access_check inside settings function (c6f2d14)
• Remove erroneous shift calls inside cade definitions in main (6f15593)