Locking down OS X


#1

Useful tool:
https://github.com/SummitRoute/osxlockdown
https://objective-see.com/products/lockdown.html

Useful resources:
This project pulled from numerous resources including:

https://github.com/drduh/OS-X-Security-and-Privacy-Guide
DISA's STIG for Apple OSX 10.10: http://iase.disa.mil/stigs/os/mac/Pages/index.aspx
https://github.com/jackiesingh/Mac-OSX-STIG
The IRS Safeguard Computer Security Evaluation Matrix (SCSEM) safeguards-scsem_MacOSX10.8.xlsx
CIS Apple OSX 10.10 Benchmark
Articles from https://derflounder.wordpress.com/
Apple's Mac OS X Security Configuration For Mac OS X Version 10.6 Snow Leopard


#2

I wrote https://github.com/isecpartners/yontma-mac to auto-hiberate your MAC if your screensaver is on and it gets unplugged from power or network. Could help mitigate against a cold-boot attack or something similar.

It's not bullet-proof though, people have reported problems with it although it works fine for me most of the time. The main problem seems to be sometimes instead of hibernating it will shut down.


#3

Nice @tomrittervg!