From 8a706470c558609eb12cdd77e3591bb4b9323f09 Mon Sep 17 00:00:00 2001
From: Kris Payne <krispayne@me.com>
Date: Thu, 18 Feb 2016 18:19:44 -0800
Subject: [PATCH] adding cis-finder.plist

setting EmptyTrashSecurely to 1
---
 ElCapitan_CIS.sh | 2 +-
 cis-finder.plist | 8 ++++++++
 2 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 cis-finder.plist

diff --git a/ElCapitan_CIS.sh b/ElCapitan_CIS.sh
index 7f22d20..2048de4 100644
--- a/ElCapitan_CIS.sh
+++ b/ElCapitan_CIS.sh
@@ -252,7 +252,7 @@ systemPreferences() {
         # 2.10 Java 6 is not the default Java runtime
 
         # 2.11 Securely delete files as needed (Recommended)
-        # Need to re-work this into either configuration profile or User Template.
+        # user cis-finder.plist in a configuration profile
         # /usr/bin/defaults write ~/Library/Preferences/com.apple.finder EmptyTrashSecurely 1
 sleep 5
 }
diff --git a/cis-finder.plist b/cis-finder.plist
new file mode 100644
index 0000000..718706f
--- /dev/null
+++ b/cis-finder.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>EmptyTrashSecurely</key>
+	<integer>1</integer>
+</dict>
+</plist>