Auditing Mac OS X Compliance with the Center for Internet Security Benchmark Using Nessus

This paper describes the auditing of a Mac OS X v10.5 system using the compliance checks in Nessus 3.2.x from Tenable Network Security. The creation process for the audit compliance policy file for use with Nessus will be covered. Example compliance checks will be used to demonstrate the process. The basis for the checks performed against the Mac OS X system will be the Mac OS X Benchmark from the Center for Internet Security. A complete listing of the checks implemented will be provided.