Enable FileVault – Encryption Type
Details FileVault secures a system’s data by automatically encrypting its boot volume and requiring a password or recovery key to...
- Home
- Security Hardening
- CIS Apple OSX 10 .9 L1 V1.3.0
CIS Apple OSX 10 .9 L1 V1.3.0
Enable Firewall
Details A firewall is a piece of software that blocks unwanted incoming connections to a system. Apple has posted general...Enable Firewall Stealth Mode
Details While in Stealth mode the computer will not respond to unsolicited probes, dropping that traffic. http://support.apple.com/en-us/HT201642 Stealth mode on...Enable Gatekeeper
Details Gatekeeper is Apple’s application white-listing control that restricts downloaded applications from launching. It functions as a control to limit...Enable Secure Keyboard Entry in terminal.app
Details Secure Keyboard Entry prevents other applications on the system and/or network from detecting and recording what is typed into...Enable security auditing
Details OSX’s audit facility, auditd, receives notifications from the kernel when certain system calls, such as open, fork, and exit,...Enable “Show Wi-Fi status in menu bar”
Details The Wi-Fi status in the menu bar indicates if the system’s wireless internet capabilities are enabled. If so, the...Enable system data files and security update installs – ConfigDataInstall
Details Ensure that system and security updates are installed after they are available from Apple. This setting enables definition updates...Enable system data files and security update installs – CriticalUpdateInstall
Details Ensure that system and security updates are installed after they are available from Apple. This setting enables definition updates...Ensure ftp server is not running
Details Mac OS X used to have a graphical front-end to the embedded ftp server in the Operating System. Ftp...