Includes Directory

The includes directory contains supporting files used by the generation scripts. These files provide baseline data, configuration profile templates, and payload definitions.

---

Files Reference

mSCP 2.0 (Beta)

mSCP 2.0 is currently in Beta

mSCP 2.0 is under active development and should not be used in production. Please report any issues to the project. For production deployments, refer to mSCP 1.0.

Located in config/includes/:

File	Description
800-53_baselines.yaml	NIST 800-53 control baseline definitions
mscp-data.yaml	Project metadata and configuration
acronyms.yaml	Acronym definitions
pwpolicy.xml	Password policy configuration template
com.apple.alf.private_data.mobileconfig	Application firewall profile template
com.apple.security.authorization.mobileconfig	Security authorization profile template
enablePF-mscp.sh	Packet filter enablement script

mSCP 1.0

Always Use the Correct Branch

Each macOS version has its own branch (sequoia, sonoma, ventura, etc.). Never use the main branch — it won’t work for generating content.

Located in includes/:

File	Description
800-53_baselines.yaml	NIST 800-53 control baseline definitions
mscp-data.yaml	Project metadata and configuration
supported_payloads.yaml	Supported configuration profile payloads
pwpolicy.xml	Password policy configuration template
com.apple.alf.private_data.mobileconfig	Application firewall profile template
com.apple.security.authorization.mobileconfig	Security authorization profile template
enablePF-mscp.sh	Packet filter enablement script

---

Key Files

mSCP 2.0 (Beta)

mSCP 2.0 is currently in Beta

mSCP 2.0 is under active development and should not be used in production. Please report any issues to the project. For production deployments, refer to mSCP 1.0.

800-53_baselines.yaml — Contains the NIST 800-53 control mappings used by the -c flag in ./mscp.py baseline to output controls covered by rules.

mscp-data.yaml — Project-wide metadata including version information, supported platforms, and default settings.

acronyms.yaml — Acronym definitions used in generated documentation.

mSCP 1.0

Always Use the Correct Branch

Each macOS version has its own branch (sequoia, sonoma, ventura, etc.). Never use the main branch — it won’t work for generating content.

supported_payloads.yaml — Defines which configuration profile payloads the project supports. When adding custom rules that use new payloads, add them here.

800-53_baselines.yaml — Contains the NIST 800-53 control mappings used by the -c flag in generate_baseline.py to output controls covered by rules.

mscp-data.yaml — Project-wide metadata including version information and default settings.

---

Directory Structure

mSCP 2.0 (Beta)

mSCP 2.0 is currently in Beta

mSCP 2.0 is under active development and should not be used in production. Please report any issues to the project. For production deployments, refer to mSCP 1.0.

• Directoryconfig/includes/

  • 800-53_baselines.yaml
  • mscp-data.yaml
  • acronyms.yaml
  • pwpolicy.xml
  • com.apple.alf.private_data.mobileconfig
  • com.apple.security.authorization.mobileconfig
  • enablePF-mscp.sh

mSCP 1.0

Always Use the Correct Branch

Each macOS version has its own branch (sequoia, sonoma, ventura, etc.). Never use the main branch — it won’t work for generating content.

• Directoryincludes/

  • 800-53_baselines.yaml
  • mscp-data.yaml
  • supported_payloads.yaml
  • pwpolicy.xml
  • com.apple.alf.private_data.mobileconfig
  • com.apple.security.authorization.mobileconfig
  • enablePF-mscp.sh

---

Next Steps

• Directory Layout — Repository structure overview
• Customize Rules — Add custom payloads for new rules