Changed instructions for DRIVEDOCS.1.7v0.1 per RFC Comment Issue 154 (#…

…155) * Changed instructions for DRIVEDOCS.1.7v0.1 per RFC Comment Issue 154 * Disallow users in org from sharing --------- Co-authored-by: Alden Hilton <[email protected]>
cisagov · Jan 29, 2024 · 412c83d · 412c83d
1 parent 5a7e28f
commit 412c83d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/...ines/Google Drive and Docs Minimum Viable Secure Configuration Baseline v0.1.md b/...ines/Google Drive and Docs Minimum Viable Secure Configuration Baseline v0.1.md
@@ -184,7 +184,7 @@ To configure the settings for Sharing options:
 
 #### GWS.DRIVEDOCS.1.7v0.1 Instructions
 1.  Select **Sharing settings** -\> **Sharing options**.
-2.  Select **Distributing content outside of your domain** -\> **Only users in your organization.**
+2.  Select **Distributing content outside of your domain** -\> **No one**
 
 #### GWS.DRIVEDOCS.1.8v0.1 Instructions
 1.  Select **Sharing settings -\> General access default.**

diff --git a/rego/Drive.rego b/rego/Drive.rego
@@ -259,7 +259,7 @@ NonCompliantOUs1_7 contains OU if {
     Events := utils.FilterEvents(LogEvents, "SHARING_TEAM_DRIVE_CROSS_DOMAIN_OPTIONS", OU)
     count(Events) > 0
     LastEvent := utils.GetLastEvent(Events)
-    SettingValue := "CROSS_DOMAIN_FROM_INTERNAL_ONLY CROSS_DOMAIN_MOVES_BLOCKED INHERIT_FROM_PARENT"
+    SettingValue := "CROSS_DOMAIN_MOVES_BLOCKED INHERIT_FROM_PARENT"
     contains(SettingValue, LastEvent.NewValue) == false
 }