Includes Directory

The includes directory contains supporting files used by the generation scripts. These files provide baseline data, configuration profile templates, and payload definitions.

---

Files Reference

mSCP 2.0

Located in config/includes/:

File	Description
800-53_baselines.yaml	NIST 800-53 control baseline definitions
mscp-data.yaml	Project metadata and configuration
acronyms.yaml	Acronym definitions
pwpolicy.xml	Password policy configuration template
com.apple.alf.private_data.mobileconfig	Application firewall profile template
com.apple.security.authorization.mobileconfig	Security authorization profile template
enablePF-mscp.sh	Packet filter enablement script

mSCP 1.0

Always Use the Correct Branch

The main branch is now used for mSCP 2.0 and will generate content using the mSCP 2.0 methods. For mSCP 1.0, each macOS version has its own branch (sequoia, sonoma, ventura, etc.) — check out the branch that matches your target OS.

Located in includes/:

File	Description
800-53_baselines.yaml	NIST 800-53 control baseline definitions
mscp-data.yaml	Project metadata and configuration
supported_payloads.yaml	Supported configuration profile payloads
pwpolicy.xml	Password policy configuration template
com.apple.alf.private_data.mobileconfig	Application firewall profile template
com.apple.security.authorization.mobileconfig	Security authorization profile template
enablePF-mscp.sh	Packet filter enablement script

---

Key Files

mSCP 2.0

800-53_baselines.yaml — Contains the NIST 800-53 control mappings used by the -c flag in ./mscp.py baseline to output controls covered by rules.

mscp-data.yaml — Project-wide metadata including version information, supported platforms, and default settings.

acronyms.yaml — Acronym definitions used in generated documentation.

mSCP 1.0

Always Use the Correct Branch

The main branch is now used for mSCP 2.0 and will generate content using the mSCP 2.0 methods. For mSCP 1.0, each macOS version has its own branch (sequoia, sonoma, ventura, etc.) — check out the branch that matches your target OS.

supported_payloads.yaml — Defines which configuration profile payloads the project supports. When adding custom rules that use new payloads, add them here.

800-53_baselines.yaml — Contains the NIST 800-53 control mappings used by the -c flag in generate_baseline.py to output controls covered by rules.

mscp-data.yaml — Project-wide metadata including version information and default settings.

---

Directory Structure

mSCP 2.0

• Directoryconfig/includes/

  • 800-53_baselines.yaml
  • mscp-data.yaml
  • acronyms.yaml
  • pwpolicy.xml
  • com.apple.alf.private_data.mobileconfig
  • com.apple.security.authorization.mobileconfig
  • enablePF-mscp.sh

mSCP 1.0

Always Use the Correct Branch

The main branch is now used for mSCP 2.0 and will generate content using the mSCP 2.0 methods. For mSCP 1.0, each macOS version has its own branch (sequoia, sonoma, ventura, etc.) — check out the branch that matches your target OS.

• Directoryincludes/

  • 800-53_baselines.yaml
  • mscp-data.yaml
  • supported_payloads.yaml
  • pwpolicy.xml
  • com.apple.alf.private_data.mobileconfig
  • com.apple.security.authorization.mobileconfig
  • enablePF-mscp.sh

---

Next Steps

• Directory Layout — Repository structure overview
• Customize Rules — Add custom payloads for new rules