Enable Firewall Stealth Mode
Details While in Stealth mode the computer will not respond to unsolicited probes, dropping that traffic. http://support.apple.com/en-us/HT201642 Rationale: Stealth mode...
- Home
- Security Hardening
- CIS Apple MacOS 10.12 L1 V1.2.0
CIS Apple MacOS 10.12 L1 V1.2.0
Enable Gatekeeper
Details Gatekeeper is Apple’s application white-listing control that restricts downloaded applications from launching. It functions as a control to limit...Enable macOS update installs
Details Ensure that macOS updates are installed after they are available from Apple. This setting enables macOS updates to be...Enable Secure Keyboard Entry in terminal.app
Details Secure Keyboard Entry prevents other applications on the system and/or network from detecting and recording what is typed into...Enable security auditing
Details macOS’s audit facility, auditd, receives notifications from the kernel when certain system calls, such as open, fork, and exit,...Enable ‘Set time and date automatically’ – Set time and date automatically
Details Correct date and time settings are required for authentication protocols, file creation, modification dates and log entries. Note: If...Enable ‘Show Wi-Fi status in menu bar’ – Show Wi-Fi status in menu bar
Details The Wi-Fi status in the menu bar indicates if the system’s wireless internet capabilities are enabled. If so, the...Enable system data files and security update installs – ‘ConfigDataInstall’
Details Ensure that system and security updates are installed after they are available from Apple. This setting enables definition updates...Enable system data files and security update installs – ‘CriticalUpdateInstall’
Details Ensure that system and security updates are installed after they are available from Apple. This setting enables definition updates...Ensure all user storage CoreStorage volumes are encrypted
Details Apple introduced Core Storage with 10.7. It is used as the default for formatting on macOS volumes prior to...