Enable Firewall Stealth Mode
Details Stealth mode on the firewall minimizes the threat of system discovery tools while connected to a network or the...
- Home
- Security Hardening
- CIS Apple OSX 10.11 El Capitan L1 V1.1.0
CIS Apple OSX 10.11 El Capitan L1 V1.1.0
Enable Gatekeeper
Details Disallowing unsigned software will reduce the risk of unauthorized or malicious applications from running on the system. Solution Perform...Enable OS X update installs
Details Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited Solution Perform...Enable Secure Keyboard Entry in terminal.app
Details Enabling Secure Keyboard Entry minimizes the risk of a key logger from detecting what is entered in Terminal. Solution...Enable security auditing
Details Logs generated by auditd may be useful when investigating a security incident as they may help reveal the vulnerable...Enable ‘Show Wi-Fi status in menu bar’
Details Enabling ‘Show Wi-Fi status in menu bar’ is a security awareness method that helps mitigate public area wireless exploits...Enable system data files and security update installs – ‘ConfigDataInstall’
Details Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited Solution Perform...Enable system data files and security update installs – ‘CriticalUpdateInstall’
Details Patches need to be applied in a timely manner to reduce the risk of vulnerabilities being exploited Solution Perform...Ensure ftp server is not running
Details Ftp servers should not be run on an end user desktop. Dedicated servers or appropriate cloud storage should be...Ensure http server is not running
Details Web serving should not be done from a user desktop. Dedicated webservers or appropriate cloud storage should be used....