Generate a Baseline

The project provides the following baseline files, located in the /baselines/ folder:

• NIST 800-53

  • High 800-53r5_high.yaml

  • Moderate 800-53r5_moderate.yaml

  • Low 800-53r5_low.yaml

• DISA-STIG DISA-STIG.yaml

• NIST 800-171 800-171.yaml

• CNSSI 1253 cnssi-1253.yaml

If you want to create your own baseline or modify an existing baseline, the generate-baseline.py found in the scripts folder will generate a {baseline}.yaml file containing all the rules corresponding with the provided tag (baseline). This {baseline}.yaml is required to run the generate-guidance.py script.

Get a list of available tags

➜  macos_security git:(big_sur) ./scripts/generate_baseline.py -l
800-171
800-53r4_high
800-53r4_low
800-53r4_moderate
800-53r5_high
800-53r5_low
800-53r5_moderate
800-53r5_privacy
all_rules
cnssi-1253
inherent
manual
n_a
none
permanent
stig
supplemental

Generate a new baseline

➜  macos_security git:(big_sur) ./scripts/generate_baseline.py -k 800-53r5_moderate
➜  macos_security git:(big_sur) ls -dn build/baselines/*
-rw-r--r--  1 501  20  6350 Jan 19 13:30 build/baselines/800-53r5_moderate.yaml